November 26, 2024 at 05:21PM Malwarebytes’ Black Friday 2024 deals offer 50% off annual subscriptions for its anti-malware, VPN, and Personal Data Remover services. Discounts apply until December 8th, with products including Malwarebytes Standard, Plus, and Ultimate. New offerings include Identity Protection and Personal Data Remover. Visit their site for more details. ### Meeting Notes … Read more
November 8, 2024 at 09:40AM Malwarebytes has acquired AzireVPN, a Sweden-based privacy-focused VPN provider, to enhance its product range. This move aims to strengthen Malwarebytes’ offerings in the cybersecurity and privacy sectors. The announcement was made on SecurityWeek. **Meeting Takeaways:** 1. **Acquisition Announcement**: Malwarebytes has acquired AzireVPN, a VPN provider based in Sweden. 2. **Strategic … Read more
September 24, 2024 at 05:15AM A hacker known as IntelBroker announced the theft of data from Deloitte’s improperly secured server on the BreachForums cybercrime forum. The stolen data includes email addresses, intranet communications, and internal settings and is available for download to forum users. Deloitte has confirmed the breach but states that client data is … Read more
August 4, 2024 at 10:07PM Scammers used Google’s ad system to push a fake version of Google Authenticator, tricking users into downloading malware. AI-written emails now make up 40% of business email compromise cases. CISA appointed its first chief artificial intelligence officer, Lisa Einstein. Vulnerabilities in ServiceNow and Acronis Cyber Infrastructure were flagged by CISA. … Read more
July 31, 2024 at 01:48PM Google’s ad platform has been manipulated by threat actors to display fake Google Authenticator ads, distributing the DeerStealer malware. Malicious ads impersonate trusted sites, presenting a challenge for detection. Despite efforts to block malicious advertisers, threat actors continue to evade detection through URL cloaking. Clicking on the ads leads to … Read more
June 7, 2024 at 05:00AM The FBI has 7,000 decryption keys for LockBit ransomware, aiming to help victims. The gang’s infrastructure was dismantled in an international operation, and its administrator, Dmitry Yuryevich Khoroshev, was identified. Despite this, LockBit remains active, with new variants targeting vulnerable Microsoft SQL servers and VMware ESXi systems. Organizations are warned … Read more
June 5, 2024 at 07:01AM RansomHub, a new ransomware strain, has been identified as a rebranded version of Knight ransomware. It employs double extortion tactics and targets various platforms, using phishing campaigns for distribution. The group behind it has been linked to recent attacks and is recruiting affiliates. Ransomware activity has been on the rise, … Read more
May 29, 2024 at 05:41PM Following the shutdown of BreachForums by the FBI and the DOJ, the alleged reappearance of the site has raised suspicions among researchers. The revival includes attempts to sell purported personal data of 560 million customers. There are doubts regarding the legitimacy of the revival, with experts pointing to potential law … Read more
January 11, 2024 at 09:00AM Cybersecurity researchers have found an enhanced version of the macOS information stealer, Atomic (AMOS), with updated capabilities, including payload encryption to bypass detection rules. Its cost has risen to $3,000/month with a festive promotion. Malvertising campaigns impersonating Slack and TradingView are used to distribute the malware. Caution is advised when … Read more
November 9, 2023 at 11:15AM A threat actor has been using Google Ads to distribute a trojanized version of the CPU-Z tool, delivering the Redline info-stealing malware. Malicious ads redirect victims to a cloned copy of a legitimate Windows news site, where they are prompted to download a digitally-signed CPU-Z installer. This installer contains a … Read more