Tag: technews

From Cryptojacking to DDoS Attacks: Diicot Expands Tactics with Cay This paper describes previously undocumented payloads associated with a Romanian threat actor named Diicot. This includes an executable that fetches and executes the SSH brute-forcer and Chrome if they don’t exist in the system. An internet scanner based on Zmap can write the results of…

Microsoft Azure, Outlook, and OneDrive Disruptions Blamed on Massive DDoS The company has also been observing a number of DDoS attacks originating from a country called Storm-1359, which it calls Killnet. According to the company, these attacks have surged from 10-20 attacks per day in November 2022 to 40-60 attacks daily in February 2023.Microsoft on…

Advanced Methods Used by State-Backed Hackers to Target Middle Eastern and African Governments Rochberger describes the nature of the attack and its steps. The infection chain is triggered by the exploitation of vulnerable on-premises Internet Information Services (IIS) and Microsoft Exchange servers to infiltrate target networks. A successful breakin is followed by reconnaissance activity to…

Introducing AI-guided Remediation for IaC Security To make it easier for development teams to address the various types of IaC misconfigurations, Checkmarx introduces AI guided remediation for KICS. It helps developers to detect insecure configurations and vulnerabilities in their applications, data, or services. Some of the most common types of security issues are:Access Controls: Misconfigurations…

Apple macOS Systems Targeted by Sophisticated Toolkit Researchers Discover The Romanian firm’s analysis is based on an examination of four samples that were uploaded to VirusTotal by an unnamed victim. Cybersecurity researchers have uncovered a set of malicious artifacts that they say is part of a sophisticated toolkit targeting Apple macOS systems. The three malicious…

New Malware Targets 40 Web Browsers and 70 Browser Extensions Mystic Stealer, a new type of information-stealing malware, has been found to steal data from over 40 different web browsers and over 70 web browser extensions. The malware, like many other crimeware solutions that are offered for sale, focuses on pilfering data and is implemented…

Rogue Android apps target Pakistani nationals in sophisticated espionage campaign Cyfirma has discovered that Individuals in the Pakistan region have been targeted using two rogue Android apps available on the Google Play Store as part of a new targeted campaign. The company attributes the campaign to a threat actor known as DoNot Team, also known…

Over 100,000 stolen chat account credentials are being sold on dark web marketplaces, Over 101,100 compromised OpenAI ChatGPT account credentials have found their way onto dark web marketplaces between June 2022 and May 2023, with India accounting for 12,632 of them. The Asia-Pacific region has experienced the highest concentration of ChatG PT credentials being offered…

Humans Aren’t Mentally Ready for an AI-Saturated ‘Post-Truth A major question that has thus far been almost entirely unexamined is how this AI-dominated future will affect people’s minds. Will AI make people more reliant on and distracted by technology at a time when that’s already a major issue. AI can also allow someone to imitate…

2023 Amazon Prime Day: Latest News, Deals, and Coverage In the past, Amazon Prime Day has been a moving target. Sometimes it occurred in the summer, sometimes in the fall, and sometimes it unofficially happened twice a year. But for 2023, the hyped-up shopping event is taking place on July 11th and 12th. We’ll be…