Latest Cybersecurity News and Articles

---

Rust-Based Info Stealers Abuse GitHub Codespaces

Analyzing the info-stealer with a decompiler, researchers noticed a number of interesting function names, including anti-debugging features and stealing data from web browsers, Discord, Steam, and cryptocurrency wallets, among others.

---

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

Two malicious packages discovered in the npm package repository have been found to conceal an open source information stealer malware called TurkoRat. The packages – named nodejs-encrypt-agent and nodejs-cookie-proxy-agent – were collectively downloaded approximately 1,200 times and were available for more than two months before they were identified and taken down. ReversingLabs, which broke

---

Identity Crimes Remain at All-Time High in 2022

The volume of identity fraud incidents last year barely changed from an all-time high recorded in 2021, with Google Voice accounts the most popular target, according to the Identity Theft Resource Center (ITRC).

---

Russian IT worker jailed for participating in pro-Ukraine DDoS attacks

Yevgeny Kotikov was found guilty of targeting the information resources of the Russian Ministry of Defence as well as the website of the president, according to state-owned news agency TASS.

---

BatLoader Impersonates Midjourney, ChatGPT in Drive-by Cyberattacks

In its latest campaign, BatLoader is using MSIX Windows App Installer files to infect devices with Redline Stealer. This is not the first time BatLoader has targeted users searching for AI tools.

---

UMass Memorial agrees to pay $1.2M to settle FLSA claims stemming from Kronos attack

UMass Memorial Health has agreed to pay $1.2 million to settle wage and hour claims stemming from a ransomware attack that took down its timekeeping system, according to court documents filed Friday.

---

Social Engineering Risks Found in Microsoft Teams

“According to our findings, Microsoft Teams is one of the ten most targeted sign-in applications, with nearly 40% of targeted organizations having at least one unauthorized login attempt trying to gain access,” said researchers at Proofpoint.

---

FTC says fertility tracking app Premom shared sensitive health data with third parties

Easy Healthcare will also be required to pay a $100,000 civil penalty for violating HBNR, as well as an additional $100,000 each to Connecticut, the District of Columbia, and Oregon for violating their respective laws.

---

House hearing details cyber resilience efforts for energy, water and healthcare

Federal agencies have stepped up efforts to boost intelligence sharing and build industry resilience amid a wave of increased cyber threats against critical infrastructure providers.

---

Apple fixes three new zero-days exploited to hack iPhones, Macs

Apple addressed the three zero-days in macOS Ventura 13.4, iOS and iPadOS 16.5, tvOS 16.5, watchOS 9.5, and Safari 16.5 with improved bounds checks, input validation, and memory management.

---

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

Malicious Google Search ads for generative AI services like OpenAI ChatGPT and Midjourney are being used to direct users to sketchy websites as part of a BATLOADER campaign designed to deliver RedLine Stealer malware. "Both AI services are extremely popular but lack first-party standalone apps (i.e., users interface with ChatGPT via their web interface while Midjourney uses Discord)," eSentire

---

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

Apple on Thursday rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and the Safari web browser to address three new zero-day flaws that it said are being actively exploited in the wild. The three security shortcomings are listed below - CVE-2023-32409 - A WebKit flaw that could be exploited by a malicious actor to break out of the Web Content sandbox. It was addressed with

---

12 new vulnerabilities have become associated with ransomware

New research identified 12 vulnerabilities newly associated with ransomware in Q1 2023, indicating increasingly complicated ransomware attacks.

---

Qualys Discovers New Sotdas Malware Variant

The latest iteration of the Sotdas malware has emerged, showcasing a variety of innovative features and advanced techniques for evading detection. This malware family is written in C++. After achieving persistence and collecting system information, Sotdas leverages this data for optimizing resource utilization and initiating cryptomining operations.

---

European Data Protection Board changes facial recognition guidelines

The European Data Protection Board (EDPB) has updated its facial recognition guidelines for law enforcement to ensure compliance with privacy laws. 

---

U.S. saw 45% fewer ransomware victims posted on the dark web

The rise in ransomware attacks have changed how security leaders protect their organizations, including filing claims for cyber insurance.

---

Patients angered after Oklahoma allergy clinic blames cyberattack for shutdown

The Oklahoma Institute of Allergy Asthma and Immunology posted a notice on its doors this month saying it will be closing "effective immediately due to a cybersecurity event.” Clinics in the towns of Norman and Yukon were both closed.

---

Dr. Chase Cunningham named VP of Security Market Research at G2

With more than two decades of industry experience, Dr. Chase Cunningham has been appointed Vice President of Security Market Research at G2.

---

Leveraging Dropbox to Soar Into Inbox

The new way that hackers originate BEC 3.0 attacks is through legitimate services. In this attack, hackers create free Dropbox accounts and leverage their domain legitimacy to create pages with phishing embedded within them.

---

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks. "The infection turns these devices into mobile proxies, tools for stealing and selling SMS messages, social media and online messaging accounts and monetization via advertisements and click fraud,"