Cybersecurity News - Page 339

Login credentials for Facebook accounts were harvested via a network of websites owned by the cyber criminal group.

The use of WebSockets is notable because typically skimmer attacks exfiltrate data using XHR requests or HTML tags.

The culprits behind the attacks are believed to be the Strontium APT, the Lazarus Group, and the Cerium group.

The investigation into the incident revealed that the platform was hit with a “flash loan” attack.

A weekly vulnerability digest.

The CostaRicto campaign deploys a previously undocumented malware to target businesses around the world.

The ModPipe backdoor targets restaurant point-of-sale (POS) solutions from Oracle used by bars, restaurants, and hotels worldwide.

Cobalt Strike pen testing toolkit has been a subject of controversy for years mainly because of it use by malicious actors.

Attackers behind the botnet fund their operation by mining cryptocurrency with the help of such tools as XMRig and cgmining, and also by providing DDoS-for-hire services.

That makes it a total of five zero days patched by tech giant in recent weeks.