Justice Department seizes domains used in Nobelium spear-phishing attacks
The U.S. Justice Department has announced the seizure of domains used in Nobelium spear-phishing attacks previously identified by Microsoft last week.
New macOS malware linked to OceanLotus group
Security researchers have discovered a new macOS backdoor linked to the OceanLotus hacking group. The new malware variant has added new features such as new behavior and domain names.
SlothfulMedia: new malware variant used by “sophisticated actors”
Security experts warned of a new malware variant dubbed SlothfulMedia has been used by a "sophisticated cyber actor."
GADOLINIUM threat actors use cloud services and open source tools in cyberattacks
Security experts from Microsoft have observed a cyber threat actor dubbed GADOLINIUM that uses new attack techniques via cloud services and open source tools.
NSA and FBI: watch out for Russian malware Drovorub
The National Security Agency (NSA) and the Federal Bureau of Investigation (FBI) have released a joint cybersecurity alert for a new Russian malware dubbed Drovorub.
Doki malware targets exposed Docker servers in the cloud
Security researchers at Intezer Labs detected a new Linux malware dubbed "Doki" and cyber attack that uses blockchain wallet for generating command and control (C2) domain names.
CStealer: a new Windows trojan password stealer
A new Windows trojan dubbed CStealer attempts to steal passwords from Chrome browser. The malware also uses a remote MongoDB server to store the stolen passwords.
Watchbog targets unpatched systems
Security experts have uncovered an incident that involved the Watchbog cryptomining botnet. Attackers exploited CVE-2018-1000861 to establish a foothold on the victim's network and install Watchbog malware on unpatched systems.
PyLocky ransomware decryption tool
Talos security researchers have developed a new decryption tool that victims could potentially use to recover files locked out by PyLocky ransomware.
Linux Rabbit and Rabbot Malware threats
Security researchers from Anomali Labs have discovered a new malware dubbed "Linux Rabbit" that has targeted Linux servers and Internet-of-Things (IoT) devices in Russia, South Korea, the UK, and the US.