malware

New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.

New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.

GreyNoise researchers warn of a new AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor. GreyNoise discovered the…

3 weeks ago
New PumaBot targets Linux IoT surveillance devicesNew PumaBot targets Linux IoT surveillance devices

New PumaBot targets Linux IoT surveillance devices

PumaBot targets Linux IoT devices, using SSH brute-force attacks to steal credentials, spread malware, and mine crypto. Darktrace researchers discovered…

3 weeks ago
Crooks use a fake antivirus site to spread Venom RAT and a mix of malwareCrooks use a fake antivirus site to spread Venom RAT and a mix of malware

Crooks use a fake antivirus site to spread Venom RAT and a mix of malware

Researchers found a fake Bitdefender site spreading the Venom RAT by tricking users into downloading it as antivirus software. DomainTools…

3 weeks ago
Iranian Man pleaded guilty to role in Robbinhood Ransomware attacks<gwmw style="display:none;"></gwmw>Iranian Man pleaded guilty to role in Robbinhood Ransomware attacks<gwmw style="display:none;"></gwmw>

Iranian Man pleaded guilty to role in Robbinhood Ransomware attacks<gwmw style="display:none;"></gwmw>

Iranian man pleads guilty to role in Baltimore ransomware attack tied to Robbinhood, admitting to computer and wire fraud conspiracy.…

3 weeks ago
DragonForce operator chained SimpleHelp flaws to target an MSP and its customersDragonForce operator chained SimpleHelp flaws to target an MSP and its customers

DragonForce operator chained SimpleHelp flaws to target an MSP and its customers

Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a managed service provider. Sophos researchers…

3 weeks ago
Nova Scotia Power confirms it was hit by ransomware attack but hasn’t paid the ransomNova Scotia Power confirms it was hit by ransomware attack but hasn’t paid the ransom

Nova Scotia Power confirms it was hit by ransomware attack but hasn’t paid the ransom

Nova Scotia Power confirms it was hit by a ransomware attack but hasn't paid the ransom, nearly a month after…

3 weeks ago
Marlboro-Chesterfield Pathology data breach impacted 235,911 individualsMarlboro-Chesterfield Pathology data breach impacted 235,911 individuals

Marlboro-Chesterfield Pathology data breach impacted 235,911 individuals

SafePay ransomware hit Marlboro-Chesterfield Pathology, stealing personal data of 235,000 people in a major breach. SafePay ransomware hit Marlboro-Chesterfield Pathology,…

3 weeks ago
China-linked APT UNC5221 started exploiting Ivanti EPMM flaws shortly after their disclosureChina-linked APT UNC5221 started exploiting Ivanti EPMM flaws shortly after their disclosure

China-linked APT UNC5221 started exploiting Ivanti EPMM flaws shortly after their disclosure

China-linked APT exploit Ivanti EPMM flaws to target critical sectors across Europe, North America, and Asia-Pacific, according to EclecticIQ. Researchers…

4 weeks ago
Fake software activation videos on TikTok spread Vidar, StealCFake software activation videos on TikTok spread Vidar, StealC

Fake software activation videos on TikTok spread Vidar, StealC

Crooks use TikTok videos with fake tips to trick users into running commands that install Vidar and StealC malware in…

4 weeks ago
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 46SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 46

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 46

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Sarcoma…

4 weeks ago