Cybersecurity News - Page 58

Unlike typical phishing attacks, the threat actors behind ZipLine initiate contact through companies’ public “Contact Us” forms.

The files install UpCrypter, which helps hackers deploy RATs like PureHVNC, DCRat, and Babylon RAT.

Nearly 1,971 unique IP addresses were involved in what appears to be a coordinated reconnaissance campaign.

The attackers hijack web traffic by manipulating captive portal behavior to deliver the Staticplugin malware downloader.

The leaked materials include VM images, phishing kits, rootkits, cracked security tools, and more than 20,000 browser history records.

Interestingly, the malware isn't hidden in the file itself, but in the file name.

The campaigns employ persistent implants that harvest detailed host data.

Attackers used VPS services, mainly from providers like Hyonix and Host Universal, to hide their true locations and appear as legitimate users.

In brief: Apple fixes zero-day exploited in ‘an extremely sophisticated attack,’ Russian hackers are exploiting a Cisco bug, and more.

The group focuses on hacking vulnerable network infrastructure in key industries across North America, Europe, Asia, and Africa.