Exploits

ChillyHell modular macOS malware OKed by Apple in 2021

ChillyHell, a modular macOS backdoor believed to be long dormant, has likely been infecting computers for years while flying under the radar, according to...

Chinese APT Hits Philippine Military Firm with New EggStreme Fileless Malware

Bitdefender uncovers EggStreme, a fileless malware by a China-based APT targeting the Philippine military and APAC organisations. Cybersecurity researchers at Bitdefender have identified a new...

CyberVolk Ransomware Attacking Windows System in Critical Infrastructure and Scientific Institutions

CyberVolk ransomware targets gov and critical infrastructure in Japan, France, and the UK, demanding $20K Bitcoin via Telegram. 

New Fileless Malware Attack Uses AsyncRAT for Credential Theft

LevelBlue Labs has published new research on a recent attack that used a fileless loader to deliver AsyncRAT, a well-known Remote Access Trojan used...

Crypto malware scare

⚡ Crypto malware scare: In the biggest supply chain hack in history, hackers hijacked 18 huge npm packages (chalk, debug and others), slipping in...

Misconfigured Docker APIs targeted by novel malware

Hackread reports that threat actors have exploited unsecured Docker APIs to facilitate the distribution of new malware that prevents external API access while deploying...

New GONEPOSTAL Malware Hijacking Outlook to Enable Command and Control Communication

GONEPOSTAL malware hijacks Outlook via phishing, using COM APIs to send encrypted C2 emails and evade traditional defenses. 

Kimsuky Hackers Via Weaponized LNK File Abuses GitHub for Malware Delivery

Kimsuky uses GitHub repos to deliver malware via fake tax invoice LNK files, evolving tactics to evade defenses and steal data. 

Fileless malware: old tricks for new attacks

The first “fileless worm” on the internet plagued organizations in 2001. A new report from LevelBlue shines a spotlight on AsyncRAT, which is also...

Latest articles