Salesforce customers targeted in data theft campaign via compromised Drift integration
The attackers were focused on harvesting credentials, specifically searching for AWS access keys, passwords, and Snowflake tokens.
Cybersecurity News - Page 66
ZipLine campaign targets supply chain manufacturers with MixShell malware
Unlike typical phishing attacks, the threat actors behind ZipLine initiate contact through companies’ public “Contact Us” forms.
New phishing campaign uses fake voicemails to spread malware
The files install UpCrypter, which helps hackers deploy RATs like PureHVNC, DCRat, and Babylon RAT.
Researchers warn of major spike in scans targeting Microsoft RDWA and RDP Web Client portals
Nearly 1,971 unique IP addresses were involved in what appears to be a coordinated reconnaissance campaign.
China-linked hackers target Southeast Asian diplomats
The attackers hijack web traffic by manipulating captive portal behavior to deliver the Staticplugin malware downloader.
Rare leak exposes North Korea’s Kimsuky: Stolen certs, rootkits, and custom Cobalt Strike
The leaked materials include VM images, phishing kits, rootkits, cracked security tools, and more than 20,000 browser history records.
New Linux malware exploits file name trick to deliver VShell backdoor
Interestingly, the malware isn't hidden in the file itself, but in the file name.
Belarus-linked hacker group targets Ukraine and Poland in ongoing cyberattacks
The campaigns employ persistent implants that harvest detailed host data.
Coordinated SaaS account compromise campaign using VPS servers
Attackers used VPS services, mainly from providers like Hyonix and Host Universal, to hide their true locations and appear as legitimate users.
Cyber Security Week in Review: August 22, 2025
In brief: Apple fixes zero-day exploited in ‘an extremely sophisticated attack,’ Russian hackers are exploiting a Cisco bug, and more.
Showing elements 651 - 660