LockBit ransomware leaks gigabytes of Boeing data

November 12, 2023 at 06:56PM LockBit ransomware has leaked more than 43GB of files stolen from Boeing after the aerospace company refused to pay the ransom. The leaked data includes backups for various systems, with the most recent files dated October 22. LockBit had warned Boeing about the leak and threatened to publish a sample … Read more

MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts

November 9, 2023 at 07:40AM Cybercriminals associated with the Cl0p ransomware gang, known as Lace Tempest, have exploited a zero-day vulnerability in on-prem versions of IT service and help desk software SysAid. Microsoft’s Threat Intelligence discovered the exploits and reported them to SysAid, who promptly released patches. The attackers used a new path traversal vulnerability … Read more

Turla Updates Kazuar Backdoor with Advanced Anti-Analysis to Evade Detection

November 1, 2023 at 03:49AM Turla, a Russia-linked hacking group, is using an updated version of a backdoor called Kazuar that emphasizes stealth and evasion techniques, according to Palo Alto Networks Unit 42. Kazuar, a .NET-based implant first discovered in 2017, has been improved by the threat actor behind the operation to enhance their attack … Read more

Arid Viper Camouflages Malware in Knockoff Dating App

October 31, 2023 at 01:55PM APT group Arid Viper is targeting Arabic-speaking Android users with a fake dating app called Skipped. It collects sensitive user information by sharing malicious links disguised as updates. The attackers control the domains used in the campaign and have been active since April 2022. The malware can disable security notifications … Read more

Huawei, Vivo phones tag Google app as TrojanSMS-PA malware

October 30, 2023 at 10:51AM Some Huawei, Honor, and Vivo smartphones and tablets are displaying false ‘Security threat’ alerts, urging users to delete the Google app due to it being detected as malware. The alerts claim that the app is secretly sending SMS messages and recommend immediate uninstallation. Google denies that its Play Protect is … Read more

23AndMe Hacker Leaks New Tranche of Stolen Data

October 19, 2023 at 04:47PM A threat actor known as Golem has released a new dataset containing the records of over 4 million people’s genetic ancestry, including information on wealthy individuals in the US and Western Europe, after compromising the 23AndMe site. 23andMe is still verifying the authenticity of the leaked data. The breach was … Read more