📢 SECURITY ADVISORIES 1[−]
18 MayRansomware gang targets Windows admins via PuTTy, WinSCP malvertisingA ransomware operation targets Windows system administrators by taking out Google ads to promote fake download sites for Putty and WinSCP. [...]BLEEPINGCOMPUTER.COM
🔥 INCIDENT REPORTING 3[−]
18 MayTransatlantic Cable podcast episode 347 | Kaspersky official blogEpisode 347 of the Kaspersky podcast has data breaches, APT trend reports and much more!KASPERSKY.COM
18 MayISMG Editors: Why Synthetic ID Fraud Is on the RiseAlso: More Support for Ransomware Victims, Key Takeaways From RSA 2024 In the latest weekly update, ISMG editors discussed key takeaways from the RSA Conference, delve into the surge of synthetic ID fraud in the auto lending industry, and examine a new initiative by the UK's Nati…DATABREACHTODAY.CO.UK
18 MayUniCon 2024 - 8 talkssubmitted by ashar to security_cpe 1 points | 0 comments https://infosec.pub/pictrs/image/e3122a07-0db4-40ed-b738-621453aa16ca.png Welcome to SCYTHE’s fifth annual UniCon, a free virtual all-day purple teaming conference held on April 9, National Unicorn Day! #UniCon24 Theme: Str…INFOSEC.PUB
🕵️ THREAT INTELLIGENCE 5[−]
18 MayNorwegian National Cyber Security Centre Recommends Moving Away from SSLVPN and WebVPNsubmitted by 0nekoneko7 to securitynews 1 points | 0 comments https://thecyberexpress.com/replacement-of-sslvpn-and-webvpn/THECYBEREXPRESS.COM
18 MaySugarGh0st RAT Variant Used in Targeted AI Industry AttacksThe May 2024 campaign, dubbed UNK_SweetSpecter, employs the SugarGh0st RAT, a remote access trojan tailored from the Gh0stRAT. This variant, historically linked to Chinese-speaking threat actors, has now been repurposed to target AI-related entities.INFOSECURITY-MAGAZINE.COM
18 MayTracking the Progression of Earth Hundun's Cyberespionage Campaign in 2024Deuterbear, while similar to Waterbear in many ways, shows advancements in capabilities such as including support for shellcode plugins, avoiding handshakes for RAT operation, and using HTTPS for C&C communication.TRENDMICRO.COM
18 MayKimsuky Hackers Deploy New Linux Backdoor in Attacks on South KoreaGomir shares many similarities with GoBear and features direct command and control (C2) communication, persistence mechanisms, and support for executing a wide range of commands.BLEEPINGCOMPUTER.COM
18 MayWireshark 4.2.5 Released, (Sat, May 18th)Wireshark release 4.2.5 fixes 3 vulnerabilities (%%cve:2024-4853%%, %%cve:2024-4854%% and %%cve:2024-4855%%) and 19 bugs.
ISC.SANS.EDU
🌐 CYBER THREAT LANDSCAPE 4[−]
18 MayNew Android Banking Trojan Mimics Google Play Update AppA new Android banking Trojan called "Antidot" is targeting users across multiple regions by mimicking a Google Play update app and incorporating various malicious features like overlay attacks, keylogging, and remote control capabilities.INFOSECURITY-MAGAZINE.COM
18 MayNew Backdoors on a European Government’s Network Appear to be RussianResearchers with the Slovak cybersecurity firm ESET published a technical analysis on Wednesday of the two backdoors by a suspected Russian threat group, which they named LunarWeb and LunarMail.THERECORD.MEDIA
18 MayAndroid malware Grandoreiro returns after police disruptionThe Android banking trojan "Grandoreiro" is spreading in a large-scale phishing campaign in over 60 countries, targeting customer accounts of roughly 1,500 banks. [...]BLEEPINGCOMPUTER.COM
18 MayBanking malware Grandoreiro returns after police disruptionThe banking trojan "Grandoreiro" is spreading in a large-scale phishing campaign in over 60 countries, targeting customer accounts of roughly 1,500 banks. [...]BLEEPINGCOMPUTER.COM