One Email Could Open a Mail Server. The Attackers Went After Its Master Keys
A crafted email could trigger commands on certain Zimbra servers without a click. Microsoft traced how attackers then pursued authentication keys and persistence.
Tag data theft
North Korea Leverages Foreign IT Workers to Infiltrate U.S. Companies
North Korea is reportedly employing foreign IT workers to infiltrate U.S. companies, posing significant security risks and raising concerns over data theft and funding for weapons programs.
StopAndProtect Campaign Exploits Nearly 2,000 Hacked WordPress Sites for Malware Distribution
A global cybercrime operation known as StopAndProtect has been identified, utilizing thousands of compromised WordPress websites to spread malware and steal sensitive data.
Suspected Chinese Hackers Target University Email Servers
A campaign attributed to suspected Chinese spies has compromised email servers at several major universities in the US and Canada, exploiting vulnerabilities in Roundcube mail software to access sensitive data.
Malicious npm Packages Linked to North Korea Target Developer Secrets
Recent findings reveal a set of malicious npm packages linked to North Korean threat actors, designed to steal sensitive developer information under the guise of legitimate tools.
Extortionists Target Firms with In-Person USB Attacks
A data-theft gang has escalated its tactics, now targeting businesses directly with USB drives after failed online attempts.
New Cybercrime Group Exploits Microsoft Teams for Data Theft
A newly identified threat group is using social engineering tactics and custom malware to compromise organizations via Microsoft Teams, according to Google's Threat Intelligence Group.
Speagle Malware Exploits Cobra DocGuard for Data Theft
A new malware named Speagle has been identified, which hijacks the Cobra DocGuard software to extract sensitive data from infected systems.
malware: Malicious npm Package Disguised as OpenClaw Installer Deploys RAT and Steals macOS Credentials
A malicious npm package posing as an OpenClaw installer has been identified, capable of deploying a remote access trojan (RAT) and stealing sensitive data from macOS systems.
Steaelite RAT: A New Tool for Double Extortion Attacks
The Steaelite remote access trojan combines data theft and ransomware capabilities, streamlining double extortion attacks on Windows systems.
