Latest Cybersecurity News and Articles


Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks

22 February 2024
A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities. "SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system to start spreading itself throughout the network," Sysdig researcher Miguel Hernández said. "The worm automatically searches through known credential

Russian Government Software Backdoored to Deploy Konni RAT Malware

22 February 2024
An installer for a tool likely used by the Russian Consular Department of the Ministry of Foreign Affairs (MID) has been backdoored to deliver a remote access trojan called Konni RAT (aka UpDog). The findings come from German cybersecurity company DCSO, which linked the activity as originating from the Democratic People's Republic of Korea (DPRK)-nexus actors targeting Russia. The

Europe Announces Launch of Formal Probe Into TikTok Under Digital Rights Law

22 February 2024
The European Commission is investigating TikTok for potential violations of the Digital Services Act related to child protection, advertising transparency, and harmful content.

Report: Initial Ransomware Demands Jump 20% to $600,000 in 2023

22 February 2024
A report by Arctic Wolf on cybercrime in 2023 revealed that ransomware demands rose by 20%, with some industries facing median demands of $1 million or more per incident.

NCSC-UK Sounds Alarm Over Private Branch Exchange Attacks

22 February 2024
The UK's National Cyber Security Centre (NCSC) has warned smaller organizations about the potential vulnerability of their private branch exchange (PBX) phone systems to cyberattacks.

Report: Manufacturing Bears the Brunt of Industrial Ransomware

22 February 2024
The industrial sector, particularly manufacturing, has been heavily targeted by ransomware attacks, with over 900 incidents reported in the past year, according to a report by Dragos.

Singapore Struggles With Scams as Cybercrime Cases Keep Climbing

22 February 2024
Scams and cybercrime cases in Singapore increased by 49.6% in 2023, with victims losing a total of SG$651.8 million (~US$483.62 million), despite industry-wide measures being implemented to combat such incidents.

Web3 Crypto Malware: Angel Drainer - From Phishing Sites to Malicious Injections

22 February 2024
The growth of Web3 and Dapp technologies has attracted cybercriminals, leading to the creation of thousands of Web3 phishing sites with crypto drainers and an increase in attacks targeting Dapp users.

NSA Cyber Director Rob Joyce to Retire

22 February 2024
The director of cybersecurity at the National Security Agency, Rob Joyce, is retiring after 34 years of service. David Luber, deputy director of the Cybersecurity Directorate, will succeed Joyce.

New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

22 February 2024
These vulnerabilities could lead users to join a malicious network or allow attackers to access trusted networks without a password. The vulnerabilities could result in potential attacks such as malware infections and data theft.

U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

22 February 2024
The U.S. State Department has announced monetary rewards of up to $15 million for information that could lead to the identification of key leaders within the LockBit ransomware group and the arrest of any individual participating in the operation. "Since January 2020, LockBit actors have executed over 2,000 attacks against victims in the United States, and around the world, causing costly

New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics

21 February 2024
ReversingLabs' research revealed a broader campaign involving multiple packages and sophisticated tactics, indicating an emerging trend of DLL sideloading attacks in open-source environments.

New 'VietCredCare' Stealer Targeting Facebook Advertisers in Vietnam

21 February 2024
The malware is distributed through links to bogus sites on social media and messaging platforms, and it is designed to filter out Facebook credentials while evading detection by security software.

Top UK Universities Recovering Following Targeted DDoS Attack

21 February 2024
The attack targeted the Janet Network, used by several UK universities, and was claimed by the hacktivist group Anonymous Sudan. This incident reflects a growing trend of cyberattacks against UK institutions.

Knight Ransomware Source Code for Sale After Leak Site Shuts Down

21 February 2024
The alleged source code for the third iteration of the Knight ransomware is being offered for sale to a single buyer on a hacker forum, indicating a potential shift in the group's operations.

Fake Tokens Exploit BRICS Investment Hype

21 February 2024
Security researchers have identified a rising trend of cryptocurrency counterfeiting targeting Fortune 100 companies, involving the creation of tokens impersonating major brands, government bodies, and national fiat currencies.

New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

21 February 2024
Migo disables security defenses on Redis servers, sets up keys for SSH access, and deploys a modified rootkit to hide processes and artifacts, resembling tactics used by known cryptojacking groups.

VMware Urges Admins to Remove Deprecated, Vulnerable Enhanced Authentication Plug-in

21 February 2024
VMware has urged users to uninstall the deprecated Enhanced Authentication Plugin (EAP) due to the discovery of critical security flaws, including an arbitrary authentication relay bug and a session hijack flaw.

New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

21 February 2024
Cybersecurity researchers have identified two authentication bypass flaws in open-source Wi-Fi software found in Android, Linux, and ChromeOS devices that could trick users into joining a malicious clone of a legitimate network or allow an attacker to join a trusted network without a password. The vulnerabilities, tracked as CVE-2023-52160 and CVE-2023-52161, have been discovered following a

VoltSchemer Attacks Use Wireless Chargers to Inject Voice Commands, Fry Phones

21 February 2024
The attack takes advantage of security flaws in wireless charging systems, allowing attackers to manipulate the charger's voltage and interfere with the communication between the charger and the smartphone.