Cyber Security News

White Rabbit: New Ransomware with FIN8 Connection
Date

White Rabbit: New Ransomware with FIN8 Connection

Since the middle of December 2021, a  new ransomware strain seemed to have emerged. Initially, famed ransomware hunter and researcher Michael Gillespie took to Twitter to see if anyone had managed to get a sample of the strain now called White Rabbit, which certainly would have picked up the ea

New Backdoor Malware Targets Windows, Mac, and Linux
Date

New Backdoor Malware Targets Windows, Mac, and Linux

A group of cybersecurity researchers at Intezer have discovered a new malware strain that is capable of creating backdoors on Windows, Mac, and Linux machines. The malware was discovered in December 2021 and hints at a trend of new malware being developed that is capable of targeting multiple operat

Brewery Illustrates how Destructive Ransomware Can Be
Date

Brewery Illustrates how Destructive Ransomware Can Be

Towards the end of the holiday season Portland, Oregon-based brewery McMenamins confirmed it had suffered a ransomware attack dating back to December 12, 2021. On December 16, 2021, Bleeping Computer reported that the Brewery has suffered a ransomware incident. The brewery did confirm that it ha

Pysa Ransomware Ramps Up Attacks
Date

Pysa Ransomware Ramps Up Attacks

In the NCC Groups monthly threat pulse article it was discovered that the Pysa ransomware strain took the dubious honor of becoming one of the most prolific ransomware strains for the month of November. Attacking businesses has always been on the agenda for those behind Pysa, in the past the publica

Nation-State Threat Actors Jump on the Log4j2 Bandwagon
Date

Nation-State Threat Actors Jump on the Log4j2 Bandwagon

What is rapidly turning into one of the major InfoSec talking points for the year the threat posed by potential exploitation of the Log4j2 flaw is increasing exponentially for those who have not patched the popular logging application. In our previous coverage we detailed how threat actors distribut

Apache Log4j2 Vulnerability in Time for Christmas
Date

Apache Log4j2 Vulnerability in Time for Christmas

With the public release of information regarding vulnerability CVE-2021-4428, also known as Log4j2 or Log4Shell, on December 10, 2021, many can be forgiven just letting the news pass by. For players of videogames in the 90s, Log4j2 resembles a save code or even worse a cheat code for a pixel-defined

Card Skimming Malware injected into WooCommerce Plugins
Date

Card Skimming Malware injected into WooCommerce Plugins

Recently the potential dangers of online shopping were made apparent over the recent Black Friday period. As soon as that ended the Christmas shopping spree began, and another discovery by security firm Sucuri again shows the dangers of online shopping to both consumers and retailers. According to

Emotet Now Seen Dropping Cobalt Strike
Date

Emotet Now Seen Dropping Cobalt Strike

In November 2021 this publication covered the return of Emotet after law enforcement agencies around the globe worked to cease the malware’s operations by seizing critical infrastructure. Since the return of the botnet, it has been incredibly active being distributed in several campaigns. Now resear

300,000 Android Users Infected with Malware
Date

300,000 Android Users Infected with Malware

According to a new report published by Threat Fabric, several malware distribution campaigns have infected almost 300,000 Android users. Infections were carried out by users downloading malicious apps from the Google Play Store containing malware droppers which would then drop banking trojans specif

Crypter Distributing Malware to Crypto and NFT Communities
Date

Crypter Distributing Malware to Crypto and NFT Communities

To say that the cryptocurrency market, now valued at 2.5 trillion USD, has seen its fair share of scams would be an understatement. The latest to affect the cryptocurrency and Non-Fungible Token (NFT) community involves a threat actor targeting enthusiasts on the popular messaging platform Discord.