Network Security - Security World Trend Now

Unveiling the “Etherhiding” Technique: Uncovering Malicious Code in WordPress Sites

Morgan Sarah11 months ago010 mins

Rise of EtherHiding: Abusing Blockchain Technology for Malicious Activities Campaign Overview and Technique Researchers from Guardio have uncovered a new cyberattack campaign dubbed “ClearFake” that utilizes blockchain technology to host and spread malicious code. In this campaign, threat actors exploit compromised WordPress sites to distribute fake browser updates that contain various forms of malware, including…

Israeli Rocket Alert Apps Seen as Spyware Threat to National Security

Reynolds Alex11 months ago011 mins

Malware & Threats: Spyware Caught Masquerading as Israeli Rocket Alert Applications In light of the recent Israel-Gaza conflict, threat actors have targeted Israeli rocket alerting applications to spread fear and distribute mobile spyware, according to a report by Cloudflare. With ongoing rocket launches by Hamas into Israel, individuals in Israel rely on several mobile applications…

ShellBot: A New Breed of Linux SSH Server Cracker Emerges

Morgan Sarah11 months ago07 mins

Cyberattackers Targeting Linux SSH Servers with ShellBot Malware According to researchers at the AhnLab Security Emergency Response Center (ASEC), cyberattackers are using a new method to hide their malicious activity while targeting Linux SSH servers with the ShellBot malware. By using hexadecimal IP (Hex IP) addresses, threat actors are evading behavior-based detection systems, making it…

Rising Tensions in the Middle East: Iranian APT34 Spy Campaign Targets Saudi Arabia

Emma Thompson11 months ago08 mins

Phishing Campaign by APT34 Targets Middle East Users A recent phishing campaign conducted by APT34, also known as OilRig, Helix Kitten, or Cobalt Gypsy, is targeting users in the Middle East. APT34, an advanced persistent threat group linked to Iran, has been known for its cyber espionage activities and has previously targeted government agencies, critical…

Cybersecurity Alert: Active Exploit of Firewall Bug Sparks Urgent CISA Warning

Nguyen Michael11 months ago09 mins

Firewall Bug Under Active Attack Triggers CISA Warning CISA (Cybersecurity and Infrastructure Security Agency) has issued a warning about an ongoing attack targeting Palo Alto Networks’ PAN-OS firewall software. The agency is urging public and federal IT security teams to apply the available fixes as soon as possible to mitigate the risk. Palo Alto Networks…

Routers Under Siege: Urgent Call to Patch Now!

Morgan Sarah11 months ago010 mins

Report: IZ1H9 Campaign Exploiting Unpatched Routers and IoT Devices to Launch DDoS Attacks Introduction In a recent discovery by researchers from FortiGuard Labs, a new campaign named IZ1H9 has emerged, focusing on exploiting unpatched router and Internet of Things (IoT) devices to create a growing botnet. This botnet is then used to execute targeted distributed…

NATO Launches Probe into Breach and Leak of Internal Documents: Implications for Security and Transparency

Nguyen Michael11 months ago011 mins

Cybercrime: NATO Investigating Breach and Leak of Internal Documents Background The North Atlantic Treaty Organization (NATO) is currently investigating claims made by a politically motivated hacking group called SiegedSec, stating that they have successfully breached NATO‘s computer systems and leaked a cache of documents online. This would mark the second breach by SiegedSec in the…

Unraveling the Intricate Web: The 0ktapus Threat Group Strikes 130 Firms

Nguyen Michael11 months ago09 mins

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms Introduction In a recent report, cybersecurity researchers from Group-IB have uncovered a large-scale phishing campaign orchestrated by the threat group known as “0ktapus.” This campaign targeted more than 130 organizations, compromising a total of 9,931 accounts. The attacks primarily aimed to obtain identity credentials and multi-factor authentication…

Endpoint Malware Volumes Decline as Campaigns Push Boundaries: WatchGuard Threat Lab Report

Reynolds Alex11 months ago010 mins

WatchGuard Technologies Releases Internet Security Report Highlighting Key Threat Trends Overview WatchGuard Technologies, a global leader in unified cybersecurity, has recently published its latest Internet Security Report, which provides insights into the top malware trends and network and endpoint security threats. The report, based on research conducted by WatchGuard Threat Lab researchers, reveals several important…

Unveiling the Hidden Threat: How WordPress Caching Plug-in Puts Websites at Risk

Emma Thompson11 months ago06 mins

Sophisticated malware has been discovered hiding behind an authentic-looking WordPress caching plug-in, putting infected websites at risk of being completely hijacked by threat actors. Researchers from Wordfence, a cybersecurity company, found that this malicious plug-in can perform a range of harmful actions while appearing as a legitimate add-on for the WordPress platform. The plug-in has…