Russian authorities round up 14 REvil ransomware gang members
Russian authorities have arrested 14 members of the infamous REvil ransomware gang and dismantled the network after a raid across Russian cities Moscow, St. Petersburg and Lipetsk.
Malware
Securezoo Cybersecurity Threat Center blog posts of malware threats.
Hackers can exploit doorLock HomeKit vulnerability on iPhones to launch DoS attacks
Hackers can exploit an iPhone HomeKit vulnerability dubbed “doorLock” on iPhones to launch persistent denial of service (DoS) attacks, a researcher says.
Shutterfly targeted with ransomware attack
California-based photography and image sharing company Shutterfly LLC has been targeted in a ransomware attack.
FBI: Cuba ransomware compromised 49 critical infrastructure entities
The Federal Bureau of Investigation (FBI) has issued a cybersecurity alert for ransomware attacks that have compromised 49 entities in five critical infrastructure sectors, such as financial, government, healthcare, manufacturing, and information technology.
Attackers exploit Windows Installer zero-day vulnerability (CVE-2021-41379)
Bad actors have been exploiting a previously patched Windows Installer zero-day privileged escalation vulnerability CVE-2021-41379.
Squirrelwaffle uses Office docs to infect victim systems with CobaltStrike
Researchers have discovered a new malware threat dubbed “Squirrelwaffle” that uses Microsoft Office documents to infect victim systems with CobaltStrike.
Attackers exploit ZOHO ManageEngine ADSelfService Plus software
Attackers have been exploiting vulnerable ZOHO ManageEngine ADSelfService Plus software as part of a targeted campaign.
Embedded malware discovered in NPM package ua-parser-js
Embedded malware has been discovered in an NPM package ua-parser-js, a popular JavaScript library designed to detect browser, engine, OS, CPU, and device type/model from User-Agent data.
Trickbot tops most popular malware in September 2021
Check Point Research has revealed that Trickbot is once again the most popular malware, according to a Global Threat Index report for September 2021. A remote access trojan, njRAT, was also added to the top 10 report for first time ever.
FontOnLake malware targets Linux systems
A previously unknown malware family dubbed FontOnLake is targeting Linux systems. The malware is made up of “custom and well-designed modules.”