Discovered Malicious App on Google Play Store Steals $70,000 in Cryptocurrency Introduction to the Threat Cybersecurity researchers have recently identified a dangerous app on the Google Play Store that enabled cybercriminals to siphon off approximately $70,000 in cryptocurrency over nearly five months. This discovery underscores the importance of vigilance while downloading apps, especially those related…
Federal Charges Against Alleged IRGC Members On Friday, U.S. federal prosecutors unsealed criminal charges against three Iranian nationals. The charges claim that these individuals are employed by the Islamic Revolutionary Guard Corps (IRGC). They are accused of targeting current and former U.S. officials to steal sensitive data. Who Are They? Masoud Jalili: 36 years old…
Progress Software Updates WhatsUp Gold with Security Fixes On September 20, 2024, Progress Software announced the release of version 24.0.1 of WhatsUp Gold, addressing six security flaws. These updates include fixes for two critical vulnerabilities. Although the company has not released detailed descriptions of the flaws, they have listed their CVE identifiers, including CVE-2024-46905 with…
Understanding the New Security Vulnerabilities in CUPS on Linux Systems Recent reports have disclosed a new set of security vulnerabilities in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems. These vulnerabilities may allow remote command execution, posing a significant risk to affected systems. Impact of Vulnerabilities Remote attackers could exploit these vulnerabilities to…
Understanding the Threat of Storm-0501 Storm-0501 has been identified as a significant threat actor targeting multiple sectors in the U.S. This attacker group primarily focuses on government, manufacturing, transportation, and law enforcement sectors. They stage ransomware attacks designed to compromise hybrid cloud environments. Multi-Stage Attack Campaign Storm-0501 utilizes a multi-stage attack process. This campaign aims…
Rising Threats in Cybersecurity: Ransomware and Malware Tactics As security technology and threat awareness among organizations improve, so do the adversaries. These cyber criminals are adopting and relying on new techniques to maximize speed and impact while evading detection. Ransomware and malware continue to be the method of choice for big game hunting (BGH) cyber…
New Campaign Using HTML Smuggling to Deliver DCRat to Russian-Speaking Users Introduction Recently, a new campaign has been identified targeting Russian-speaking users. The culprit? A commodity trojan named DCRat, also known as DarkCrystal RAT. This campaign employs a technique known as HTML smuggling to distribute the malware. This marks a significant departure from previous methods,…
In today's fast-evolving digital landscape, cybersecurity has become a cornerstone of organizational resilience. As cyber threats grow increasingly sophisticated, the demand for skilled cybersecurity professionals has never been higher. Whether you're a seasoned cyber professional or just starting your journey, signing up for the GIAC Newsletter ensures you're always informed and equipped. The Importance of…
Zakaj izbrati CrowdStrike Falcon LogScale kot rešitev SIEM CrowdStrike Falcon LogScale je napredna rešitev SIEM, ki ponuja številne prednosti pred tradicionalnimi SIEM orodji in konkurenčnimi rešitvami. V tem blogu bomo podrobneje pogledali, zakaj je Falcon LogScale odlična izbira za organizacije, ki želijo izboljšati svojo kibernetsko varnost in učinkovitost varnostnih operacij. Visoka hitrost iskanja in zmogljivost…
U.S. Government Sanctions Cryptocurrency Exchanges for Money Laundering On Thursday, the U.S. government sanctioned two cryptocurrency exchanges. The action also included unsealing an indictment against a Russian national. He is accused of running money laundering services used by cybercriminals. The virtual currency exchanges, Cryptex and PM2BTC, allegedly facilitated laundering of cryptocurrencies obtained through illegal activities….