Threat Actors Impersonate Oil and Gas Companies in Latest Shade Ransomware Attack
Digital criminals tried to impersonate oil and gas companies in a recent attack campaign distributing Shade ransomware.
Magecart Group’s Use of Credit Card-Skimming JavaScript Attack on the Rise
An online retailer was hit by a JavaScript attack from a group associated with Magecart, a collective of cybercriminals that specializes in skimming credit card numbers from compromised websites.
Popular JavaScript Library for Node.JS Infected With Malware to Empty Bitcoin Wallets
For several months, a version of a popular JavaScript library for Node.js contained malicious code that enabled digital attackers to compromise users' bitcoin wallets.
OceanLotus Watering Hole Campaign Compromises 21 High-Profile Southeast Asian Websites
A watering hole campaign that has been active in Southeast Asia since September has compromised at least 21 websites, including government and media domains.
Threat Actors Obfuscate JavaScript to Hide Crypto-Mining Malware
Cybercriminals buried crypto-mining malware inside compromised websites in an effort to hijack victims' computing resources.
Fileless Malware CactusTorch Executes Harmful .NET Assemblies From Memory
Security researchers observed CactusTorch, a fileless malware, using a .NET executable to run harmful .NET assemblies from memory.
Analyzing PDF and Office Documents Delivered Via Malspam
Endpoint detection and antiphishing tools can help users filter basic spam email, but detecting malspam in PDF and Microsoft Office documents requires a more thorough investigation.
What the Shell? New Security Breach Uses CHM Files to Cover Banking Trojans
A new banking Trojan is using old PowerShell tricks to hide its activity from detection tools by continually launching malicious CHM files.
Mobile Stock Trading Apps Vulnerable to Attack
Over 20 mobile apps commonly used for stock trading are not very secure, according to recent security research.
Typosquatting Attack Puts Developers at Risk From Infected JavaScript Packages
Investigations by npm, a Node.js management registry, revealed that an errant attacker uploaded 38 malicious JavaScript packages on the repository.