Cybersecurity researchers have recently unveiled a growing malicious campaign that employs a technique known as Bring Your Own Vulnerable Driver (BYOVD). This method allows attackers to disable security features, ultimately granting them access to compromised systems. In this article, we will explore the details of this malware and its implications for cybersecurity. Understanding BYOVD Attacks…
Sapphire Sleet: North Korea-Linked Threat Actor Steals $10 Million in Cryptocurrency A North Korea-linked threat actor, known as Sapphire Sleet, has been linked to the theft of over $10 million in cryptocurrency. This was accomplished through sophisticated social engineering campaigns over a six-month period. The insights come from a report by Microsoft. The findings highlight…
Understanding the Threat of Storm-2077 Government agencies and non-governmental organizations in the United States are currently facing threats from a new China state threat actor known as Storm-2077. This adversary has reportedly been active since January 2024. Furthermore, their attacks have not only targeted U.S. government entities but have also extended to private sector organizations….
Cyber Espionage Campaign Targets Tibetan Media and Universities In a recent development, a China-linked nation-state group known as TAG-112 has launched a cyber espionage campaign. This sophisticated attack targeted Tibetan media and university websites, aiming to facilitate the delivery of the Cobalt Strike post-exploitation toolkit. This toolkit is known to be used for follow-on information…
Mysterious Elephant and the Asynshell Malware Threat The threat actor known as Mysterious Elephant has recently been linked with an advanced version of malware called Asynshell. This cybercriminal group has deployed innovative attack tactics, including the use of Hajj-themed lures, to trick unsuspecting victims. The Knownsec 404 team shared this information in an analysis published…
Threat actors with ties to Russia are increasingly linked to a sophisticated cyber espionage campaign targeting various organizations across Central Asia, East Asia, and Europe. This troubling development has been highlighted by Recorded Future's Insikt Group. They have labeled this activity cluster TAG-110, which shares connections with UAC-0063, a threat group monitored by Ukraine's Computer…
Google Workspace has quickly become the productivity backbone for businesses worldwide, offering an all-in-one suite with email, cloud storage, and collaboration tools. This single-platform approach makes it easy for teams to connect and work efficiently, enabling seamless digital transformation that’s both scalable and adaptable. As companies make the shift from traditional methods to cloud-based solutions,…
Threat actors with ties to Russia are currently engaged in a cyber espionage campaign targeting organizations in Central Asia, East Asia, and Europe. This campaign, identified by Recorded Future's Insikt Group as TAG-110, raises significant concerns about the increasing threat landscape emanating from Russia. Understanding the Threat Actor: TAG-110 Origin and Connections TAG-110 is linked…
Tackling Cybercrime: Efforts by Meta Platforms, Microsoft, and the U.S. Department of Justice Cybercrime remains a significant threat to individuals and organizations worldwide. Recently, Meta Platforms, Microsoft, and the U.S. Department of Justice (DoJ) have announced independent actions to combat this growing problem. Their initiatives aim to disrupt services that enable scams, fraud, and phishing…
Cybersecurity Threats: Beware of Malicious Python Packages In November 2023, cybersecurity researchers unearthed two dangerous packages in the Python Package Index (PyPI). These packages, named gptplus and claudeai-eng, posed as popular artificial intelligence (AI) models such as OpenAI ChatGPT and Anthropic Claude. The purpose of these malicious packages was to deliver a harmful information stealer…