Kaspersky’s latest findings reveal a newly identified threat group, dubbed Armored Likho, which is currently engaged in a sophisticated spear-phishing campaign. This operation predominantly targets government entities and energy sectors across Russia, Kazakhstan, and Brazil. Armored Likho has developed an extensive malware arsenal designed to extract credentials, confidential documents, and…
The urgency is palpable for Windows and Linux users, who must urgently update cryptographic keys to safeguard their systems from firmware-based UEFI infections. This type of malware is particularly insidious, as it executes before the operating system and antimalware solutions can activate, making it especially challenging to detect and eradicate.…
UEFI Bootkits: A Growing Cybersecurity Concern In recent years, the landscape of cybersecurity threats has evolved significantly, marked notably by the introduction of bootkits targeting Unified Extensible Firmware Interface (UEFI) systems. These sophisticated forms of malware represent a new layer of vulnerability for both individual users and corporate environments, disrupting…
Microsoft Releases Critical Security Updates Addressing 39 Vulnerabilities In a significant move this December, Microsoft has released security patches addressing a total of 39 vulnerabilities across its Windows operating systems and applications during its year-end Patch Tuesday. Among these, ten vulnerabilities have been designated as critical, emphasizing the potential severe…
A recently uncovered campaign attributed to the China-based cybercrime group known as Silver Fox—also referred to as Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne—has targeted organizations in Russia and India with new malware identified as ABCDoor. The operation has prominently involved the use of phishing emails…
Targeted Supply Chain Attack on DAEMON Tools Software Discovered A recent investigation by Kaspersky has revealed a sophisticated supply chain attack targeting DAEMON Tools software. The attack involves tampering with the software’s installers, which are distributed through the official DAEMON Tools website and are signed with valid digital certificates from…
Critical Vulnerabilities Discovered in Open-Source VNC Remote Desktop Applications Recent findings reveal that four widely used open-source VNC (Virtual Network Computing) remote desktop applications are susceptible to a staggering 37 security vulnerabilities. Many of these vulnerabilities have remained undetected for the last two decades, with the most severe posing the…
Recent Cyberattack Targets Dozens of Organizations with Sophisticated Backdoors In a concerning development within the cybersecurity landscape, a follow-on payload identified by Kaspersky as a “minimalistic backdoor” has infiltrated nearly a dozen organizations. This malware possesses capabilities to execute commands, download files, and deploy shellcode within memory, complicating detection efforts…
Security Vulnerabilities Discovered in Popular Antivirus Solutions, Risking System Integrity Cybersecurity experts have recently uncovered significant security vulnerabilities in widely-used antivirus software, potentially allowing attackers to escalate privileges and solidify malware presence on compromised systems. A report from CyberArk researcher Eran Shimony, shared with The Hacker News, highlights the critical…
