Mur d'images - Cyberveille

curated by Decio

RATatouille: A Malicious Recipe Hidden in rand-user-agent (Supply Chain Compromise)

Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations | Trend Micro (US)

2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

New Play Ransomware Linux Variant Targets ESXi Shows Ties With Prolific Puma | Trend Micro (US)

Analysis of the Phishing Campaign: Behind the Incident

CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive

CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

Managing Attack Surface | Huntress Blog

Bitter Pill: Third-Party Pharmaceutical Vendor Linked to Pharmacy and Health Clinic Cyberattack

DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

3CX: Supply Chain Attack Affects Thousands of Users Worldwide

BlackLotus UEFI bootkit: Myth confirmed

Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCs

Ransomware Roundup – Trigona Ransomware

OneNote Documents Increasingly Used to Deliver Malware

The Titan Stealer: Notorious Telegram Malware Campaign

Shlayer Malware: Continued Use of Flash Updates

L’art de l’évasion How Shlayer hides its configuration inside Apple proprietary DMG files

An infostealer comes to town: Dissecting a highly evasive malware targeting Italy

Aurora: a rising stealer flying under the radar

Technical Analysis of the RedLine Stealer

AXLocker, Octocrypt, and Alice: Leading a new wave of Ransomware Campaigns

New RapperBot Campaign – We Know What You Bruting for this Time

SafeBreach Uncovers Fully Undetectable Powershell Backdoor

Chaos is a Go-based Swiss army knife of malware

Warning: New attack campaign utilized a new 0-day RCE vulnerability on Microsoft Exchange Server

Witchetty: Group Uses Updated Toolset in Attacks on Governments in Middle East

BumbleBee: Round Two

In the footsteps of the Fancy Bear: PowerPoint mouse-over event abused to deliver Graphite implants

Domain Shadowing: A Stealthy Use of DNS Compromise for Cybercrime

Azure Cloud Shell Command Injection Stealing User’s Access Tokens

Malvertising on Microsoft Edge's News Feed pushes tech support scams

Lampion Trojan Utilizes New Delivery through Cloud-Based Sharing

Dead or Alive? An Emotet Story

BRATA is evolving into an Advanced Persistent Threat