A variant of Loki info stealer that we detected through our honeypot is propagated as Windows CAB file email attachments. It uses process hollowing to evade detection.
Maze ransomware, notorious for not just encrypting but for stealing victims’ data, attacks a US IT firm. The company sent emails to customers which include IP addresses and file hashes that have been linked to previous Maze attacks.
Cybercriminals behind Nemty ransomware close down their Ransomware-as-a-Service (RaaS) operation as they zero in on private schemes. This is confirmed through a post in a Russian hacker forum.
Fake installers of popular messaging apps such as Viber and WhatsApp are propagated via fraudulent Russian websites. The installers are believed to be adware.
Video conferencing apps provide many benefits, but they also present organizations with the challenge of ensuring that their employees — and the data they work with — remain secure when using these apps.