Tag: security

Iranian hackers pose as journalists to push backdoor malware

APT42, an Iranian state-sponsored hacking group also known as Charming Kitten or Yellow Garuda has been spotted impersonating journalists from popular mainstream media titles in an attempt to deliver multi-purpose backdoors to their targets. A report from Google cybersecurity researchers found the threat actors would first set up email addresses…

Read More

LockBit ransomware site returns — but don’t worry, it might actually be OK

The website of ransomware hackers LockBit, which was seized by police and shut down, has relaunched. However, it wasn’t the hackers that propped it back up, but rather the law enforcement agents who originally seized it. The refreshed website includes some new details about the group and its leader. Some…

Read More

Microsoft Graph is becoming a popular target for hackers

Multiple hacking collectives are been actively using Microsoft Graph API to hide their communications with command & control (C2) infrastructure hosted on Microsoft cloud services, cybersecurity researchers from Symantec Threat Hunter Team have revealed. The researchers claim that for two and a half years now, groups such as APT28, REF2924,…

Read More

A dangerous new malware is targeting Macs of all kinds — here’s how to stay safe

Hackers have been observed targeting Mac devices running on both Intel and ARM silicon with brand new infostealer malware. Mac security provider Kandji discovered the malware and dubbed it Cuckoo. “This malware queries for specific files associated with specific applications, in an attempt to gather as much information as possible…

Read More

Russian hackers target EU countries using a simple Microsoft Outlook security flaw

We now know how APT28, a known Russian state-sponsored threat actor, managed to compromise multiple email accounts belonging to the Executive Committee of the German Social Democratic Party back in 2022 – it was via a security flaw in Microsoft Outlook. The German Federal Government said APT28 abused a vulnerability…

Read More

Microsoft adds more security chiefs following recent cyberattacks

Microsoft has just unveiled the next step in its major cybersecurity overhaul, and that is to hire security executives for different product groups. Following a string of major cyberattacks, and the subsequent US government “call to arms” of sorts, Microsoft decided to completely revamp its cybersecurity practices, and “put security…

Read More