In a recent cybersecurity incident, approximately 25 websites associated with the Kurdish minority have fallen victim to a sophisticated watering hole attack designed to collect sensitive information over an extended period of time, reportedly lasting more than 18 months. French cybersecurity firm Sekoia disclosed the details of the campaign, labeled…
New Cyber Threat: Mongolian Skimmer Campaign Revealed Cybersecurity experts have recently uncovered a sophisticated digital skimmer campaign utilizing Unicode obfuscation techniques to deploy a skimmer known as “Mongolian Skimmer.” Researchers from Jscrambler noted that the obfuscated nature of the script raises eyebrows due to the extensive use of accented characters,…
Cybersecurity Flaws Discovered in Roundcube Webmail Could Lead to Data Theft Recent analysis by cybersecurity experts has unveiled critical vulnerabilities within the Roundcube webmail software, which could be manipulated by attackers to run malicious JavaScript in a user’s web browser, potentially exposing sensitive information stored in their email accounts. The…
Data Breach Hits The Wayback Machine, Millions of Records Compromised The popular digital archive known as The Wayback Machine, operated by the Internet Archive, has reportedly experienced a severe data breach. This incident has led to the theft of over 31 million records, which encompass sensitive user information. According to…
The GootLoader malware continues to pose significant risks as cybercriminals exploit it to deploy new payloads onto infected systems. This malware has seen active use by threat actors aiming to target various organizations, particularly in legal and professional sectors, as reported by the cybersecurity firm Cybereason. Recent analysis from Cybereason…
Google Chrome Security Flaw Actively Exploited in the Wild Google recently disclosed that a significant security vulnerability patched in a software update to its Chrome browser has been identified as actively exploited in the wild. This flaw, designated CVE-2024-7965, was encapsulated within the V8 JavaScript and WebAssembly engine and was…
Cybersecurity Experts Uncover DarkGate Malware Campaign Targeting Samba File Shares In a recent investigation, cybersecurity analysts have unveiled a brief yet impactful campaign associated with DarkGate malware, which exploited Samba file sharing services as a vector for infection. Researchers from Palo Alto Networks’ Unit 42 indicated that the campaign occurred…
Multiple Exploit Campaigns Target Apple Safari and Google Chrome Users Recent analysis by cybersecurity experts has revealed that nation-state actors have leveraged previously patched vulnerabilities in Apple Safari and Google Chrome to distribute information-stealing malware to mobile users. The campaigns, which took place between November 2023 and July 2024, specifically…
CrowdStrike has issued a warning about a new threat actor attempting to exploit the recent Falcon Sensor update issues to distribute suspicious installation files aimed at German customers. This targeted campaign was identified following a spear-phishing attempt on July 24, 2024, which involved a fraudulent installer masquerading as the CrowdStrike…
