Tag: MONITOR

The ClickFix campaign utilizes social engineering tactics to deploy malware on Windows and macOS platforms by presenting fake Google Meet error messages. Users are tricked into downloading malware disguised as troubleshooting files. This campaign highlights the dangers of browser-based attacks and the need for enhanced security measures.…
Read More

The Water Makara campaign is a sophisticated spear-phishing attack targeting Brazilian organizations, utilizing obfuscated JavaScript to deliver the Astaroth malware. This malware compromises systems undetected, posing significant threats to sectors like banking and national security. Affected Platform: Brazilian organizations

Keypoints :

Water Makara is a spear-phishing attack specifically aimed at Brazilian organizations.…
Read More

Threat Actor: Unknown | Lelivrescolaire.fr Victim: Lelivrescolaire.fr | Lelivrescolaire.fr Price: Not disclosed Exfiltrated Data Type: User account details, student and educator data

Key Points :

The breach exposes sensitive user information, raising privacy concerns. Potential risks include identity theft and phishing attacks. Highlights the need for improved cybersecurity measures in educational platforms.…
Read More

Summary: A new Android malware called ‘FireScam’ is being distributed as a fake premium version of the Telegram app through phishing sites that imitate RuStore, Russia’s app marketplace. This malware is designed to steal user credentials and sensitive information while employing advanced evasion techniques.

Threat Actor: Unknown | FireScam Victim: Android users | Telegram

Key Point :

FireScam is delivered via a dropper module that installs the main malware payload while evading detection.…
Read More

Threat Actor: Unknown | Unknown Victim: Lelivrescolaire.fr | Lelivrescolaire.fr Price: Not disclosed Exfiltrated Data Type: Sensitive user information (students, educators, etc.)

Key Points :

The breach compromised the database of a prominent educational resource platform in France. Sensitive user information was exposed, raising concerns about data security and privacy.…
Read More

This article outlines critical vulnerabilities affecting various software products, including Citrix, Cisco, Fortinet, and Microsoft. Threat actors are exploiting these vulnerabilities, such as CVE-2023-3519 and CVE-2023-34362, to gain unauthorized access and execute malicious activities. Regular updates and security patches are essential to mitigate these risks. #CyberSecurity #VulnerabilityManagement #ThreatIntelligence

Keypoints :

Multiple critical vulnerabilities identified across various software products.…
Read More

The NonEuclid Remote Access Trojan (RAT) represents a significant threat in the cyber landscape, utilizing advanced evasion techniques and ransomware capabilities to compromise systems. Its promotion on underground forums and social media highlights the growing sophistication of malware. #CyberThreats #Malware #RAT

Keypoints :

The NonEuclid RAT allows unauthorized remote access to victims’ computers.…
Read More

This article highlights the silent threat of info stealers and emphasizes the importance of visibility and proactive measures for organizations to mitigate risks associated with leaked credentials. It provides strategic insights for decision-makers on how to address these threats effectively. #InfoStealers #Cybersecurity #CredentialManagement

Keypoints :

Info stealers are subtle but dangerous threats in the cybersecurity landscape.…
Read More

Summary: Cyberhaven fell victim to a supply-chain attack where attackers compromised their Chrome extension, allowing them to exfiltrate sensitive data such as Facebook access tokens. The incident highlights the vulnerabilities in software supply chains and the need for better security measures regarding browser extensions.

Threat Actor: Unknown | unknown Victim: Cyberhaven | Cyberhaven

Key Point :

Attackers used social engineering to gain access rights to Cyberhaven’s Chrome extension.…
Read More

Threat Actor: Unknown | Niva Bupa Insurance Group Victim: Niva Bupa Insurance Group | Niva Bupa Insurance Group Price: Not disclosed Exfiltrated Data Type: Sensitive customer information, including policyholder information, financial records, and contact details

Key Points :

A data breach has exposed sensitive customer information at Niva Bupa Insurance Group.…
Read More