Cyber Security News

Steam Accounts Stolen Using Browser-in-the-Browser Attack
Date

Steam Accounts Stolen Using Browser-in-the-Browser Attack

Steam and its vast array of gaming enthusiasts who use the platform have long been a target for cybercriminals, either to frustrate users or make significant amounts of money hijacking accounts and selling them off. Now attacks are using a newly discovered phishing method, known as a Browser-in-Brow

Beware of Bumblebee’s New Features
Date

Beware of Bumblebee’s New Features

Initially discovered in April 2022, Bumblebee activity rose as BazarLoader activity dropped off. This hinted at the Conti ransomware gang, and TrickBot had switched malware to grant backdoor access for the ransomware on targeted networks. Since Bumble Bee’s discovery, the developers behind the malwa

Sliver and Brute Ratel Replace Cobalt Strike
Date

Sliver and Brute Ratel Replace Cobalt Strike

For some time now the penetration testing tool Cobalt Strike has long had its somewhat legitimate functions abused by hackers to compromise targeted machines. The creation of Cobalt Strike beacons was also a favored malware and ransomware delivery method for several threat actors, generally followin

WordPress Sites Seen Spreading Malware via Fake DDoS Pages
Date

WordPress Sites Seen Spreading Malware via Fake DDoS Pages

Distributed denial of service (DDoS) attacks is a common frustration for internet users when looking to access their favorite online resources. Upon visiting such a resource the visitor may see a page stating that the page they want to visit is currently unavailable due to DDoS attempts flooding the

Beware the Malicious Browser Extensions Targeting Millions
Date

Beware the Malicious Browser Extensions Targeting Millions

Browser extensions can be amazingly convenient applications in your browser. To-do lists, discount code auto-fill extensions, and numerous others add a high level of functionality to how we use our favorite browser, be it Chrome, Safari, Edge, or Firefox. Sometimes this improved functionality an

Lazarus Still Determined to Steal Your Crypto
Date

Lazarus Still Determined to Steal Your Crypto

The North Korean state-sponsored threat actor Lazarus has long brought the definitions used by security researchers into doubt. Typically, state-sponsored groups are not financially motivated but motivated by the policies and aims of their state overlords. Lazarus is both in a sense that not onl

Israeli Spyware Firm Seen Exploiting Chrome Zero-Day
Date

Israeli Spyware Firm Seen Exploiting Chrome Zero-Day

Israeli-made spyware is again in the headlines. The last fallout resulted from the NSO group’s use of Pegasus which was used to track politicians, journalists, political dissidents, and political rivals, as long as the customer could pay for the service. As to the vetting of customers, it could be a

New Cryptomining Botnet Enslaves 30,000 Cloud Hosts
Date

New Cryptomining Botnet Enslaves 30,000 Cloud Hosts

Crypto miners, namely malware that is designed to mine cryptocurrency using a victim's machine and resources without their knowledge, often fly under the radar in terms of press coverage. They lack the fear ransomware can induce when you and all your work colleagues are locked out of a network or ma