Shutterfly targeted with ransomware attack
California-based photography and image sharing company Shutterfly LLC has been targeted in a ransomware attack.
malware
EwDoor Botnet attacking AT&T network edge devices
An attacker has been targeting unpatched AT&T network edge devices via a brand new botnet dubbed EwDoor.
Squirrelwaffle uses Office docs to infect victim systems with CobaltStrike
Researchers have discovered a new malware threat dubbed “Squirrelwaffle” that uses Microsoft Office documents to infect victim systems with CobaltStrike.
Embedded malware discovered in NPM package ua-parser-js
Embedded malware has been discovered in an NPM package ua-parser-js, a popular JavaScript library designed to detect browser, engine, OS, CPU, and device type/model from User-Agent data.
BlackMatter ransomware has targeted multiple U.S. critical infrastructure entities
BlackMatter ransomware has targeted multiple U.S. critical infrastructure entities, to include two U.S. Food and Agriculture Sector organizations.
Trickbot tops most popular malware in September 2021
Check Point Research has revealed that Trickbot is once again the most popular malware, according to a Global Threat Index report for September 2021. A remote access trojan, njRAT, was also added to the top 10 report for first time ever.
FontOnLake malware targets Linux systems
A previously unknown malware family dubbed FontOnLake is targeting Linux systems. The malware is made up of “custom and well-designed modules.”
Microsoft: Nobelium cybergang deploys FoggyWeb backdoor to target AD FS servers
Microsoft has warned that Nobelium threat actors are using a new backdoor malware dubbed FoggWeb to target Active Directory Federation Services (AD FS) servers.
Sidewalk backdoor linked to Grayfly espionage group
Researchers have recently discovered the Sidewalk modular backdoor has been linked to a Chinese Grayfly espionage group.
Babuk ransomware: Soon to be targeting VMware and *nix systems?
Cybercriminals behind Babuk ransomware announced in an underground forum that they are developing malware targeting Linux/UNIX and VMware ESXi systems.