BlackCat: a new ransomware-as-a-service threat
A relatively new ransomware-as-a-service dubbed “BlackCat” (also known as ALPHV) has been actively recruiting affiliates from other ransomware groups to target organizations around the globe.
Malware
Securezoo Cybersecurity Threat Center blog posts of malware threats.
CISA: Take these urgent steps to protect your organization against potential critical cybersecurity threats
The Cybersecurity and Infrastructure Security Agency (CISA) has published a new CISA Insights guideline document with steps organizations can take against potential critical cybersecurity threats.
Cisco Talos team discovers malicious campaign delivering Nanocore, Netwire and Async RATs
The Cisco Talos cybersecurity team discovered a malicious campaign delivering variants of Nanocore, Netwire and Async RATs targeting user’s information.
Microsoft warns of destructive MBR wiper malware targeting Ukranian organizations
Microsoft has issued a warning of destructive Master Boot Records (MBR) wiper malware targeting Ukranian organizations.
Russian authorities round up 14 REvil ransomware gang members
Russian authorities have arrested 14 members of the infamous REvil ransomware gang and dismantled the network after a raid across Russian cities Moscow, St. Petersburg and Lipetsk.
Hackers can exploit doorLock HomeKit vulnerability on iPhones to launch DoS attacks
Hackers can exploit an iPhone HomeKit vulnerability dubbed “doorLock” on iPhones to launch persistent denial of service (DoS) attacks, a researcher says.
Shutterfly targeted with ransomware attack
California-based photography and image sharing company Shutterfly LLC has been targeted in a ransomware attack.
FBI: Cuba ransomware compromised 49 critical infrastructure entities
The Federal Bureau of Investigation (FBI) has issued a cybersecurity alert for ransomware attacks that have compromised 49 entities in five critical infrastructure sectors, such as financial, government, healthcare, manufacturing, and information technology.
Attackers exploit Windows Installer zero-day vulnerability (CVE-2021-41379)
Bad actors have been exploiting a previously patched Windows Installer zero-day privileged escalation vulnerability CVE-2021-41379.
Squirrelwaffle uses Office docs to infect victim systems with CobaltStrike
Researchers have discovered a new malware threat dubbed “Squirrelwaffle” that uses Microsoft Office documents to infect victim systems with CobaltStrike.