Cybersecurity News - Page 214

Microsoft has attributed the attacks to Lace Tempest, a ransomware affiliate that overlaps with other cybercriminal groups such as FIN11, TA505, and Evil Corp.

The threat actors are chaining three vulnerabilities in the Veritas software - CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878.

Threat actors have been observed exploiting sites running Magento, WooCommerce, WordPress, and Shopify digital commerce platforms.

The largest known individual theft so far involved almost $8 million in USDT (Tether).

The world in brief: MOVEit zero-day mass exploited in data stealing attacks, 250+ Gigabyte motherboard models come with firmware backdoor, and more.

The ongoing campaign was first spotted on May 19, 2023.

There is no evidence that the backdoor has been leveraged for malicious purposes.

Threat actors are targeting Linux routers with publicly exposed WEBUI to execute malicious scripts to deploy the GobRAT malware.

The group claims to have stolen 2TB of sensitive data from Casepoint.

The zero-day flaw had been exploited since October 2022, with hackers installing malware on the breached devices.