In July 2024, specialists from Kaspersky Lab discovered that more than ten Russian enterprises across various industries—ranging from engineering to medicine—had fallen victim to cyberattacks involving a previously unknown backdoor, Loki. The malware was...
An unknown cyber group, likely linked to Chinese-speaking hacker collectives, began actively targeting Taiwanese drone manufacturers in 2024. According to Trend Micro, the threat is being tracked under the name TIDRONE, with its primary...
At the end of May, experts from the Natto Team investigated the reconnaissance methods and toolkit of the APT41 hacker group, which is linked to Chinese cyber threats. Continuing their research, the specialists released...
Researchers at McAfee have uncovered more than 280 malicious Android applications utilizing optical character recognition (OCR) technology to steal cryptocurrency data. Collectively dubbed SpyAgent, these applications cleverly disguise themselves as official services for banks,...
Scientists from an Israeli university have developed a novel cyberattack technique known as “RAMBO” (Radiation of Air-gapped Memory Bus for Offense). This method enables attackers to transmit data from air-gapped computers via electromagnetic emissions...
An analysis of the threats linked to the Konni campaign reveals increasing activity by the Kimsuky group, employing a variety of methods for conducting stealthy attacks. The danger lies in their use of legitimate...
Experts have identified two types of files associated with the core component of the Akira ransomware: a smaller file (573 KiB) and a larger one (1.005 KiB). Both files are compiled using MSVC and...
The Lazarus Group continues to aggressively advance its cyber offensive campaign in 2024, employing increasingly sophisticated methods. As part of the “Contagious Interview” operation, the attackers pose as recruiters conducting interviews, embedding malware into...
Latin America is experiencing a sharp rise in phishing attacks linked to the distribution of dangerous banking trojans Mekotio and BBTok. These malicious programs are designed to steal banking credentials and execute unauthorized financial...
Following numerous sanctions and the exposure of the Predator spyware, its activity significantly declined. However, according to recent data from Insikt Group analysts, malicious campaigns involving spyware are once again gaining momentum. The Predator...
Trend Micro specialists have uncovered a new cross-platform backdoor named KTLVdoor, developed by the Chinese group Earth Lusca. KTLVdoor is written in Golang and has versions for both Windows and Linux. This previously unknown...
Chinese security researchers have recently uncovered real-world attacks exploiting the CVE-2024-30051 vulnerability (CVSS score: 7.8), which has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability was first identified by Kaspersky...
