资讯

Threat Post3 年
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post5 年
‘Ultimate’ MiTM Attack Steals $1M from Israeli Startup
Hackers pulled off an elaborate man-in-the-middle campaign to rip off an Israeli startup by intercepting a wire transfer from a Chinese venture-capital firm intended for the new business.
Threat Post4 年
Lazarus Targets Job-Seeking Engineers with Malicious Documents
The notorious Lazarus advanced persistent threat (APT) group has been identified as the cybergang behind a campaign spreading malicious documents to job-seeking engineers. The ploy involves ...
Threat Post3 年
USB-based Wormable Malware Targets Windows Installer
Wormable malware dubbed Raspberry Robin has been active since last September and is wriggling its way through USB drives onto Windows machines to use Microsoft Standard Installer and other ...
Threat Post3 年
Linux Malware Deemed ‘Nearly Impossible’ to Detect
“Once the malware has infected a machine, it hides itself and any other malware used by the threat actor, making infections very hard to detect,” he explained. “Performing live forensics on ...
Threat Post3 年
Charming Kitten Sharpens Its Claws with PowerShell Backdoor
The Iranian advanced persistent threat (APT) Charming Kitten is sharpening its claws with a new set of tools, including a novel PowerShell backdoor and related stealth tactics, that show the group ...
Threat Post3 年
Angry Affiliate Leaks Conti Ransomware Gang Playbook
The data includes IP addresses for Cobalt Strike C2 servers as well as an archive including numerous tools and training materials for the group, revealing how it performs attacks.
Threat Post2 年
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Targeted attacks on Twilio and Cloudflare employees are tied to a massive phishing campaign that resulted in 9,931 accounts at over 130 organizations being compromised. The campaigns are tied to ...
Threat Post4 年
Accellion FTA Zero-Day Attacks Tied to Clop, FIN11 | Threatpost
Multiple Accellion FTA customers, including the Jones Day Law Firm, Kroger and Singtel, have all been attacked by the group, receiving extortion emails threatening to publish stolen data on the ...
Threat Post4 年
Crossing the Line: When Cyberattacks Become Acts of War
Defining an Act of War Oxford’s Reference Dictionary defines an act of war as: “ An act by one nation intended to initiate or provoke a war with another nation; an act considered sufficient ...
Threat Post2 年
Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands - Threatpost
Through the first half of 2022, 34 percent of all unique phishing attacks tracked by the researchers impersonated financial services brands. The next most popular industry for criminals to abuse ...
Threat Post4 年
Security Researcher Hides ZIP, MP3 Files Inside PNG Files on Twitter - Threatpost
Specifically, Buchanan demonstrated how he could hide both MP3 audio files and ZIP archives within the PNG images hosted on Twitter. The reason he was successful is because while Twitter strips ...