January 2023

Researchers Uncover Packer Used by Several Malware to Evade Detection for 6 Years

Over the past six years, a shellcode-based packer known as TrickGate has been functioning successfully without drawing attention while enabling threat actors to spread a variety of malware, including TrickBot, Emotet, AZORult, Agent Tesla, FormBook, Cerber, Maze, and REvil. TrickGate is a “master of disguises,” according to Arie Olshtein of Check Point Research. This is […]

Researchers Uncover Packer Used by Several Malware to Evade Detection for 6 Years Read More »

A New Wave of Malware is Spreading via Cracked Softwares

Since early 2020, information-stealing malware like Raccoon and Vidar has been disseminated using a “large and resilient infrastructure” made up of over 250 domains. Security company SEKOIA stated in a research released earlier this month that the infection chain “uses roughly a hundred of phoney cracked software catalogue websites that lead to multiple links before

A New Wave of Malware is Spreading via Cracked Softwares Read More »

Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident

DevOps platform CircleCI revealed on Friday that unidentified threat actors hacked a worker’s laptop and used malware to obtain their two-factor authentication-backed credentials to access the company’s systems and data a month earlier. The “complex attack,” according to the CI/CD provider CircleCI, occurred on December 16, 2022, and the malware evaded detection by its anti malware.

Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident Read More »

Rackspace Admits Play Ransomware Gang Was Behind Recent Breach

On Thursday, cloud services provider Rackspace acknowledged that the intrusion from last month was caused by the Play ransomware group. A previously unidentified security exploit was used by the security event, which happened on December 2, 2022, to acquire initial access to the Rackspace Hosted Exchange email system. The Texas-based business stated that “CVE-2022-41080 is

Rackspace Admits Play Ransomware Gang Was Behind Recent Breach Read More »

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

BitKeep, a decentralized multi-chain cryptocurrency wallet, announced a cyber attack on its Android app on Wednesday that allowed threat actors to spread fake copies of it in order to steal users’ digital money. In a “large-scale hacking event,” according to BitKeep CEO Kevin Como, “the altered APK caused the disclosure of user’s private keys and

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies Read More »

Potential Wiretapping Bugs Found in Google Home Smart Speakers by Researchers

For identifying security flaws in Google Home smart speakers that could be used to install backdoors and convert them into wiretapping devices, a security researcher was given a bug prize of $107,500. The researcher, who goes by the name Matt Kunze, revealed the flaws in a technical write-up released this week. The flaws “allowed an

Potential Wiretapping Bugs Found in Google Home Smart Speakers by Researchers Read More »