In a new wave of cybercrime, the Lazarus Group, a North Korean state-sponsored hacking organization, has ramped up its activities, focusing on the cryptocurrency sector. Recent reports by security firm Proofpoint indicate a large-scale malware campaign targeting digital currency users, further illustrating the group’s extensive involvement in financially motivated cyberattacks.…
A notable security vulnerability has emerged within the widely used WordPress plugin, Essential Addons for Elementor. This vulnerability, recognized as CVE-2023-32243, allows potential attackers to escalate privileges on compromised sites, posing significant risks to website security. The plugin’s maintainers addressed this issue in version 5.7.2, released on May 11, 2023.…
Recent analysis has uncovered a critical vulnerability within the Signal messaging application for Windows and Linux systems. This flaw poses a significant threat, as it could potentially enable remote attackers to execute arbitrary code on the target’s device merely through message transmission—eliminating the need for any user interaction to instigate…
Major Malware Campaign Targets Home Routers, Compromising User Security Chinese cybersecurity researchers have revealed a significant ongoing malware campaign, known as GhostDNS, which has compromised over 100,000 home routers. The attack modifies the Domain Name System (DNS) settings of these devices, routing users to malicious websites designed to steal login…
Cybersecurity Breach Targets Cryptocurrency Exchange Through StatCounter Analytics Late last week, a sophisticated cyber attack aimed at a prominent cryptocurrency exchange illustrated a concerning vulnerability in web analytics services. An unknown hacker or group of hackers successfully infiltrated the analytics platform StatCounter, compromising its script to harvest Bitcoin through targeted…
In a recent cyber incident, Magecart, a notorious hacking collective, has targeted nearly 277 e-commerce websites, employing sophisticated supply-chain tactics to compromise their systems. Researchers from RiskIQ and Trend Micro have identified this particular effort as the work of “Magecart Group 12,” which specifically infiltrated third-party JavaScript libraries used by…
Alert: New Phishing Scheme Targeting Even the Most Cautious Users
In a concerning trend, cybercriminals are employing increasingly sophisticated phishing techniques that can easily deceive even the most vigilant online users. A recent report highlighted how these malicious actors are capitalizing on the common practice of logging into websites via social media accounts, specifically focusing on services like Facebook. Antoine…
Alert: New Phishing Scheme Targeting Even the Most Cautious Users
A medium-severity vulnerability has emerged within Synology’s DiskStation Manager (DSM), posing significant risks to administrative account security. This flaw enables potential attackers to reverse-engineer an administrator’s password, potentially leading to a complete account takeover. According to Sharon Brizinov from Claroty, under specific circumstances, an assailant could leverage the flaw to…
New Campaign Unveils Widespread Distribution of Astaroth Fileless Malware In a new report from Microsoft, cybersecurity experts reveal the latest details of an extensive campaign involving the notorious Astaroth fileless malware. Initially targeting users in Europe and Brazil earlier this year, this malware has been operational since at least 2017…
