Mur d'images - Cyberveille

curated by Decio

Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangs

Weathering the storm: In the midst of a Typhoon

New TorNet backdoor seen in widespread campaign

Akira ransomware continues to evolve

Simple Mail Transfer Pirates: How threat actors are abusing third-party infrastructure to send spam

How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions

How do cryptocurrency drainer phishing scams work?

LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices

GhostSec’s joint ransomware operation and evolution of their arsenal

Threat actors leverage document publishing sites for ongoing credential and session token theft

Understanding the Phobos affiliate structure and activity

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerability

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware

New phishing-as-a-service tool “Greatness” already seen in the wild

Emotet resumes spam operations, switches to OneNote

Prometei botnet improves modules and exhibits new capabilities in recent updates

New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaign

Following the LNK metadata trail

Threat Spotlight: XLLing in Excel - threat actors using malicious add-ins

Threat Spotlight: Cyber Criminal Adoption of IPFS for Phishing, Malware Campaigns

Alchimist: A new attack framework in Chinese for Mac, Linux and Windows

MagicRAT: Lazarus’ latest gateway into victim networks

Comprehensive Threat Intelligence: Cisco Talos shares insights related to recent cyber attack on Cisco

Attackers leveraging Dark Utilities "C2aaS" platform in malware campaigns

Manjusaka: A Chinese sibling of Sliver and Cobalt Strike

Iranian linked conglomerate MuddyWater comprised of regionally focused subgroups