Fileless Attack Campaign Leverages PCASTLE to Distribute XMRig Monero-Mining Malware
According to researchers, the fileless attack uses PCASTLE to distribute samples of XMRig, a well-known Monero-mining malware family.
BlackSquid Malware Capable of Abusing 8 Exploits to Install XMRig Monero Miner
The new BlackSquid malware is capable of abusing eight notorious exploits in its attempts to install the XMRig Monero miner.
Shade Ransomware Campaign Compromises at Least 500 WordPress and Joomla Websites
Security researchers discovered a hidden HTTP directory that is allowing threat actors to install Shade ransomware on WordPress and Joomla websites.
Threat Actors Impersonate Oil and Gas Companies in Latest Shade Ransomware Attack
Digital criminals tried to impersonate oil and gas companies in a recent attack campaign distributing Shade ransomware.
Magecart Group’s Use of Credit Card-Skimming JavaScript Attack on the Rise
An online retailer was hit by a JavaScript attack from a group associated with Magecart, a collective of cybercriminals that specializes in skimming credit card numbers from compromised websites.
Popular JavaScript Library for Node.JS Infected With Malware to Empty Bitcoin Wallets
For several months, a version of a popular JavaScript library for Node.js contained malicious code that enabled digital attackers to compromise users' bitcoin wallets.
OceanLotus Watering Hole Campaign Compromises 21 High-Profile Southeast Asian Websites
A watering hole campaign that has been active in Southeast Asia since September has compromised at least 21 websites, including government and media domains.
Threat Actors Obfuscate JavaScript to Hide Crypto-Mining Malware
Cybercriminals buried crypto-mining malware inside compromised websites in an effort to hijack victims' computing resources.
Fileless Malware CactusTorch Executes Harmful .NET Assemblies From Memory
Security researchers observed CactusTorch, a fileless malware, using a .NET executable to run harmful .NET assemblies from memory.
Analyzing PDF and Office Documents Delivered Via Malspam
Endpoint detection and antiphishing tools can help users filter basic spam email, but detecting malspam in PDF and Microsoft Office documents requires a more thorough investigation.