Mur d'images - Cyberveille

curated by Decio

The Ever-Evolving Threat of the Russian-Speaking Cybercriminal Underground | Trend Micro (US)

CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024

Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit

What We Know About CVE-2024-49112 and CVE-2024-49113

Attacker Abuses Victim Resources to Reap Rewards from Titan Network

Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem

A Dive into Earth Baku’s Latest Campaign

Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft

New Play Ransomware Linux Variant Targets ESXi Shows Ties With Prolific Puma | Trend Micro (US)

The Fall of LabHost: Law Enforcement Shuts Down Phishing Service Provider | Trend Micro (US)

Unveiling the Fallout: Operation Cronos' Impact on LockBit Following Landmark Disruption

Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks | Trend Micro (US)

DarkGate Opens Organizations for Attack via Skype, Teams

Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO

CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

Kasseika Ransomware Deploys BYOVD Attacks Abuses PsExec and Exploits Martini Driver 

CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign

CVE-2023-46604 (Apache ActiveMQ) Vulnerability Exploited to Infect Systems With Cryptominers and Rootkits

A Closer Look at ChatGPT's Role in Automated Malware Creation

Malvertising Used as Entry Vector for BlackCat Actors Also Leverage SpyBoy Terminator

BlackCat Ransomware Deploys New Signed Kernel Driver

Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices

Attackers Use Containers for Profit via TrafficStealer

Mac Malware MacStealer Spreads as Fake P2E Apps

Information on Attacks Involving 3CX Desktop App

New OpcJacker Malware Distributed via Fake VPN Malvertising

Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

Batloader Malware Abuses Legitimate Tools Uses Obfuscated JavaScript Files in Q4 2022 Attacks

Raspberry Robin Malware Targets Telecom, Governments

Pilfered Keys Free App Infected by Malware Steals Keychain Data

LV Ransomware Exploits ProxyShell in Attack on a Jordan-based Company

TeamTNT Returns – or Does It?

Black Basta Ransomware Gang Infiltrates networks via QAKBOT, Brute Ratel, and Cobalt Strike

LockBit Ransomware Group Augments Its Latest Variant, LockBit 3.0, With BlackMatter Capabilities

Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

New Linux-Based Ransomware Cheerscrypt Targets ESXi Devices

CVE-2022-22965 Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware

MacOS SUHelper Root Privilege Escalation Vulnerability A Deep Dive Into CVE-2022-22639