Cybersecurity News - Page 381

Devices from Amazon, Apple, Google, and Samsung as well as some access points by Asus and Huawei, are found to be vulnerable to Kr00k.

The attack involves piggybacking C2 traffic on a legitimate traffic, thus allowing to bypass firewalls.

It's not clear what vulnerability is being exploited, but the issue may be related to a bug reported to PayPal a year ago.

The CLOP ransomware family is suspected to be involved in the attack.

The flaw in the ThemeREX Addons plugin can be used to remotely execute code on websites.

DRBControl group's malware and operational tactics overlap with similar tools and tactics used by Winnti and Emissary Panda hackers.

The campaign is believed to be the effort of three Iran-linked APT groups - APT33, APT34 and APT39.

Each of the released MARs includes malware descriptions, suggested response actions, and recommended mitigation techniques.

The extensions were part of a malvertising and ad-fraud campaign that has been active since at least since January 2019.

The hackers exploit current geopolitical events to spy on Palestinian entities and individuals.