malware

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware – Go Health Pro

by
Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware – Go Health Pro

May 03, 2025Ravie LakshmananMalware / Operational Technology An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East that lasted nearly two years. The activity, which lasted from at least May 2023 to February 2025, entailed “extensive espionage operations and suspected network … Read more

Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack – Go Health Pro

by
Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack – Go Health Pro

May 03, 2025Ravie LakshmananSupply Chain Attack / Malware Cybersecurity researchers have discovered three malicious Go modules that include obfuscated code to fetch next-stage payloads that can irrevocably overwrite a Linux system’s primary disk and render it unbootable. The names of the packages are listed below – github[.]com/truthfulpharm/prototransform github[.]com/blankloggia/go-mcp github[.]com/steelpoor/tlsproxy “Despite appearing legitimate, these modules contained … Read more

Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Flaws and ThreatNeedle Malware – Go Health Pro

by
Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Flaws and ThreatNeedle Malware – Go Health Pro

Apr 24, 2025Ravie LakshmananMalware / Threat Intelligence At least six organizations in South Korea have been targeted by the prolific North Korea-linked Lazarus Group as part of a campaign dubbed Operation SyncHole. The activity targeted South Korea’s software, IT, financial, semiconductor manufacturing, and telecommunications industries, according to a report from Kaspersky published today. The earliest … Read more

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures – Go Health Pro

by
APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures – Go Health Pro

The Russian state-sponsored threat actor known as APT29 has been linked to an advanced phishing campaign that’s targeting diplomatic entities across Europe with a new variant of WINELOADER and a previously unreported malware loader codenamed GRAPELOADER. “While the improved WINELOADER variant is still a modular backdoor used in later stages, GRAPELOADER is a newly observed … Read more

News alert: SpyCloud study shows gaps in EDR, antivirus — 66% of malware infections missed – Go Health Pro

by
News alert: SpyCloud study shows gaps in EDR, antivirus — 66% of malware infections missed – Go Health Pro

Austin, TX, USA, April 7, 2025, CyberNewswire — SpyCloud, the leading identity threat protection company, today released new analysis of its recaptured darknet data repository that shows threat actors are increasingly bypassing endpoint protection solutions: 66% of malware infections occur on devices with endpoint security solutions installed. SpyCloud offers integrations with leading endpoint detection and … Read more