Cyber Attacks

The Winnti group has been reported to be using a previously undocumented backdoor named PortReuse presumably as a jump-off point from where the threat actors can launch supply chain attacks.

Emotet (detected by Trend Micro as TrojanSpy.Win32.EMOTET.THIBEAI) which recently resurfaced, is quick to expand its campaign to bank on the popularity of former CIA contractor and NSA whistleblower Edward Snowden’s bestselling memoir.

Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.

An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.

A new ransomware family dubbed “Nemty” for the extension it adds to encrypted files has recently surfaced in the wild.

Two of the U.S. Virgin Islands’ government offices have been hit by cyberattacks, causing substantial financial and operational disruptions. A ransomware attack was waged against the U.S. Virgin Islands Police Department (VIPD), compromising its network and se

The hacking group Xenotime, reported to be behind intrusions targeting facilities in oil and gas industries, has started probing industrial control systems (ICSs) of power grids in the U.S. and the Asia-Pacific region.

Security researchers uncovered a new malware targeting Linux systems: HiddenWasp. Learn its backdoor and rootkit capabilities — and how users and organizations can defend against this threat.

Malicious actors behind the distributed denial of service (DDoS) attacks against Electrum Bitcoin wallet users were seen switching to a new malware loader.