资讯

Threat Post3 年
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post2 年
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Targeted attacks on Twilio and Cloudflare employees are tied to a massive phishing campaign that resulted in 9,931 accounts at over 130 organizations being compromised. The campaigns are tied to ...
Threat Post5 年
‘Ultimate’ MiTM Attack Steals $1M from Israeli Startup
Hackers pulled off an elaborate man-in-the-middle campaign to rip off an Israeli startup by intercepting a wire transfer from a Chinese venture-capital firm intended for the new business.
Threat Post4 年
Lazarus Targets Job-Seeking Engineers with Malicious Documents
The notorious Lazarus advanced persistent threat (APT) group has been identified as the cybergang behind a campaign spreading malicious documents to job-seeking engineers. The ploy involves ...
Threat Post3 年
USB-based Wormable Malware Targets Windows Installer
Wormable malware dubbed Raspberry Robin has been active since last September and is wriggling its way through USB drives onto Windows machines to use Microsoft Standard Installer and other ...
Threat Post3 年
Linux Malware Deemed ‘Nearly Impossible’ to Detect
“Once the malware has infected a machine, it hides itself and any other malware used by the threat actor, making infections very hard to detect,” he explained. “Performing live forensics on ...
Threat Post3 年
Conti Ransomware Expands Ability to Blow Up Backups
The Conti ransomware gang has developed novel tactics to demolish backups, especially the Veeam recovery software. Good at identifying and obliterating backups? Speak Russian? The notorious Conti ...
Threat Post3 年
Charming Kitten Sharpens Its Claws with PowerShell Backdoor
The Iranian advanced persistent threat (APT) Charming Kitten is sharpening its claws with a new set of tools, including a novel PowerShell backdoor and related stealth tactics, that show the group ...
Threat Post3 年
Angry Affiliate Leaks Conti Ransomware Gang Playbook
The data includes IP addresses for Cobalt Strike C2 servers as well as an archive including numerous tools and training materials for the group, revealing how it performs attacks.
Threat Post3 年
Infosec Insiders Community - Threatpost
Browse our curated content, contributed by the Threatpost community of industry experts, technical gurus and thought leaders.
Threat Post4 年
Accellion FTA Zero-Day Attacks Tied to Clop, FIN11 | Threatpost
Multiple Accellion FTA customers, including the Jones Day Law Firm, Kroger and Singtel, have all been attacked by the group, receiving extortion emails threatening to publish stolen data on the ...
Threat Post4 年
Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software
5 GPU Display Driver Security Bugs The most severe of the five bugs in the GPU display driver is tracked as CVE-2021-1074, which rates 7.5 out of 10 on the CVSS vulnerability scale, making it high ...