Malware

US authorities have indicted Black Kingdom ransomware adminUS authorities have indicted Black Kingdom ransomware admin

US authorities have indicted Black Kingdom ransomware admin

A 36-year-old Yemeni man behind Black Kingdom ransomware is indicted in the U.S. for 1,500 attacks on Microsoft Exchange servers.…

1 month ago
Malicious Go Modules designed to wipe Linux systemsMalicious Go Modules designed to wipe Linux systems

Malicious Go Modules designed to wipe Linux systems

Researchers found 3 malicious Go modules with hidden code that can download payloads to wipe a Linux system's main disk,…

1 month ago
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 44SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 44

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 44

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape io_uring…

1 month ago
Hive0117 group targets Russian firms with new variant of DarkWatchman malwareHive0117 group targets Russian firms with new variant of DarkWatchman malware

Hive0117 group targets Russian firms with new variant of DarkWatchman malware

Hive0117 targets Russian firms in multiple sectors with phishing attacks using a modified version of the DarkWatchman malware. A cybercrime…

2 months ago
Russia-linked group Nebulous Mantis targets NATO-related defense organizationsRussia-linked group Nebulous Mantis targets NATO-related defense organizations

Russia-linked group Nebulous Mantis targets NATO-related defense organizations

PRODAFT researchers warn of Russia-linked APT group Nebulous Mantis targeting NATO-related defense organizations Nebulous Mantis, a Russian-speaking cyber espionage group…

2 months ago
France links Russian APT28 to attacks on dozen French entitiesFrance links Russian APT28 to attacks on dozen French entities

France links Russian APT28 to attacks on dozen French entities

France blames Russia-linked APT28 for cyberattacks targeting or compromising a dozen French government bodies and other entities. The Russia-linked APT28…

2 months ago
PoC rootkit Curing evades traditional Linux detection systemsPoC rootkit Curing evades traditional Linux detection systems

PoC rootkit Curing evades traditional Linux detection systems

Researchers created a PoC rootkit called Curing that uses Linux’s io_uring feature to evade traditional system call monitoring. Armo researchers…

2 months ago
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 43SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 43

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 43

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Inside…

2 months ago
CEO of cybersecurity firm charged with installing malware on hospital systemsCEO of cybersecurity firm charged with installing malware on hospital systems

CEO of cybersecurity firm charged with installing malware on hospital systems

Veritaco CEO Jeffrey Bowie faces charges for allegedly installing malware on hospital computers, violating Oklahoma's Computer Crimes Act. Jeffrey Bowie,…

2 months ago
JPCERT warns of DslogdRAT malware deployed in Ivanti Connect SecureJPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure

JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure

Researchers identified a new malware, named DslogdRAT, deployed after exploiting a now-patched flaw in Ivanti Connect Secure (ICS). JPCERT/CC researchers…

2 months ago