Cybersecurity News - Page 103

The researchers identified an open AWS S3 bucket used as a “shared drive” among the attackers.

The campaign, dubbed 'Operation Digital Eye', targeted large IT service providers in Southern Europe between June and July 2024.

The emails included a malicious link, clicking on which triggered the download of malware.

The botnet relies on loaders like PrivateLoader, SmokeLoader, and Amadey to persist on compromised systems.

The method works across all types of browser isolation.

The suspects, believed to have defrauded victims of several million euros, employed a combination of digital and in-person scams.

In brief: Zero-day vulnerabilities in I-O data routers, Russian Turla hijacks C2 infrastructure of Pakistani hackers, and more.

The group has infiltrated the C2 infrastructure of the Pakistani-based actor Storm-0156, as part of the “spy-on-spy” tactics.

If exploited, the flaws allow attackers to alter device settings, execute arbitrary commands, and disable the firewall.

The operation has led to the arrest of 84 individuals and the seizure of over £20 million in cash and cryptocurrency.