Recent Security News

  • Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

    November 23, 2023 at 08:24AM Shipping-themed email messages are being used to distribute the WailingCrab malware. The malware consists of multiple components and is associated with the threat actor TA544. It prioritizes stealth and utilizes hacked websites and platforms like Discord for communication. The newer variants of the malware use the MQTT protocol for command-and-control,…

    Read More

  • Attack on direct debit provider London & Zurich leaves customers with 6-figure backlogs

    November 23, 2023 at 06:57AM Direct debit collection company London & Zurich suffered a ransomware attack on November 10, resulting in outages that have caused significant cash flow disruptions for customers. Some customers have been unable to process direct debit payments, leading to financial difficulties. Communication from London & Zurich has been sporadic and unclear,…

    Read More

  • 6 Steps to Accelerate Cybersecurity Incident Response

    November 23, 2023 at 05:54AM Modern security tools are improving in defending networks against cybercriminals, but incidents still occur. Effective incident response requires preparation, identification, containment, eradication, recovery, and lessons learned. Preparation involves training personnel, establishing roles and responsibilities, and devising a response strategy. Identification involves detecting incidents through internal or external means and collecting…

    Read More

  • Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

    November 23, 2023 at 05:54AM An active malware campaign is using two zero-day vulnerabilities to create a Mirai-based DDoS botnet by targeting routers and network video recorders. Akamai has discovered the attacks and identified the malware variants involved. The flaws are being kept under wraps to allow vendors to patch them. The attacks utilize offensive…

    Read More

  • Stop social engineering at the IT help desk

    November 23, 2023 at 04:12AM MGM Resorts International recently fell victim to a costly ransomware attack. Hackers used social engineering tactics to convince an employee to reveal sensitive user credentials, enabling them to bypass cyber security defenses and launch the attack. Similar incidents have occurred, highlighting the challenge of verifying the identity of requesters for…

    Read More