Mur d'images - Cyberveille

curated by Decio

Automating Pikabot’s String Deobfuscation

World-first “Cybercrime Index” ranks countries by cybercrime threat

Muddled Libra’s Evolution to the Cloud

Bringing process injection into view(s): exploiting all macOS apps using nib files · Sector 7

Unveiling the Fallout: Operation Cronos' Impact on LockBit Following Landmark Disruption

Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks | Trend Micro (US)

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

Kasseika Ransomware Deploys BYOVD Attacks Abuses PsExec and Exploits Martini Driver 

Qualys TRU Discovers Important Vulnerabilities in GNU C Library’s syslog()

Volt Typhoon Compromises 30% of Cisco RV320/325 Devices in 37 Days

Anthropic researchers find that AI models can be trained to deceive

Using AI to Automatically Jailbreak GPT-4 and Other LLMs in Under a Minute

InfectedSlurs Botnet Spreads Mirai via Zero-Days

Telekopye: Chamber of Neanderthals’ secrets

InfectedSlurs Botnet Spreads Mirai via Zero-Days

Uncovering thousands of unique secrets in PyPI packages

A Closer Look at ChatGPT's Role in Automated Malware Creation

Raising Online Defenses Through Transparency and Collaboration | Meta

#FuckStalkerware pt. 3 - ownspy got, well, owned

The New Frontline of Geopolitics | Understanding the Rise of State-Sponsored Cyber Attacks

Researchers watched 100 hours of hackers hacking honeypot computers

Midnight Blizzard conducts targeted social engineering over Microsoft Teams

Chinese Threat Actors Targeting Europe in SmugX Campaign

Condi DDoS Botnet Spreads via TP-Link's CVE-2023-1389

New Magecart-Style Campaign Abusing Legitimate Websites to Attack Others | Akamai

New macOS vulnerability, Migraine, could bypass System Integrity Protection | Microsoft Security Blog

EDR bypassing via memory manipulation techniques | WithSecure™ Labs

BlackCat Ransomware Deploys New Signed Kernel Driver

Visualizing QakBot Infrastructure

The malware threat landscape: NodeStealer, DuckTail, and more

FIN7 tradecraft seen in attacks against Veeam backup servers

Rorschach – A New Sophisticated and Fast Ransomware

Information on Attacks Involving 3CX Desktop App

New OpcJacker Malware Distributed via Fake VPN Malvertising

Shining Light on Dark Power: Yet Another Ransomware Gang

Uncle Sow: Dark Caracal in Latin America

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

Accidentally Crashing a Botnet

Wi-Spy

Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor

LV Ransomware Exploits ProxyShell in Attack on a Jordan-based Company

Unattributed RomCom Threat Actor Spoofing Popular Apps Now Hits Ukrainian Militaries

Domestic Kitten campaign spying on Iranian citizens with new FurBall malware

SafeBreach Uncovers Fully Undetectable Powershell Backdoor

BianLian Ransomware Encrypts Files in the Blink of an Eye

Black Basta Ransomware Gang Infiltrates networks via QAKBOT, Brute Ratel, and Cobalt Strike

POLONIUM targets Israel with Creepy malware

A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion – NCC Group Research

Slack’s and Teams’ Lax App Security Raises Alarms

So RapperBot, What Ya Bruting For?

Flubot: the evolution of a notorious Android Banking Malware

Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

Telerik UI exploitation leads to cryptominer, Cobalt Strike infections

Lyceum .NET DNS Backdoor

Symbiote: A New, Nearly-Impossible-to-Detect Linux Threat

Microsoft Diagnostic Tool "DogWalk" Package Path Traversal Gets Free Micropatches (0day/WontFix)

SVCReady: A New Loader Gets Ready

Analysis and Attribution of the Eternity Ransomware: Timeline and Emergence of the Eternity Group

XLoader Botnet: Find Me If You Can

New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices

Large-scale Analysis of DNS-based Tracking Evasion - broad data leaks included?

The IO Offensive: Information Operations Surrounding the Russian Invasion of Ukraine

Exploiting an Unbounded memcpy in Parallels Desktop

Multi-factor Authentication to Generate $27 Billion Globally for Mobile Operators in 2022, Juniper Research Study Finds

Web ad firms scrape email addresses before you know it

npm Supply Chain Attack Targeting Germany-Based Companies

Industroyer2: Industroyer reloaded

MacOS SUHelper Root Privilege Escalation Vulnerability A Deep Dive Into CVE-2022-22639

DEV-0537 criminal actor targeting organizations for data exfiltration and destruction

Gas Is Too Expensive; Let’s Make It Cheap!

Raccoon Stealer: “Trash panda” abuses Telegram

Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups

Can You Trust a File’s Digital Signature? New Zloader Campaign exploits Microsoft’s Signature Verification putting users at risk

ModifiedElephant APT and a Decade of Fabricating Evidence