Cybersecurity News - Page 263

One of the PingPull variants uses ICMP which makes it difficult to detect its command-and-control communications.

The researchers were able to trace the threat to a Russian-speaking threat actor.

AvosLocker and Cerber2021 ransomware gangs have begun to target vulnerable internet-exposed Atlassian Confluence servers.

Using a customized version of the DIG.net open-source tool the backdoor carries out "DNS hijacking" attacks, executes commands, drops payloads, and steals data.

This is yet another malicious campaign that exploits the Follina vulnerability.

Vice Society posted an announcement on their dark net leak site threatening to release all stolen files if the requested ransom is not paid.

The new module sends the collected data to a different remote command-and-control server.

The malware provides its operator with rootkit functionality, the ability to harvest credentials, and remote access capability.

The group’s attacks typically drop one of two backdoors, Mongall and a modified version of the open source Heyoka project.

Millions of users have become victims of scammers, who lured them to visit phishing pages, enter their account credentials and view advertisements.