In the wake of cyber attacks targeting casino giants MGM and Caesars, social engineering remains one of the most effective techniques cyber criminals employ. In these incidents, threat actors used a phone-based impersonation tactic, known as vishing, to manipulate an outsourced IT help desk into providing critical access, which paved the way for ransomware attacks … Read more
Dec 24, 2024Ravie LakshmananMalware / Data Exfiltration Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index (PyPI) repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named zebo and cometlogger, attracted 118 and 164 downloads … Read more
US Rep. Devin Nunes (R-CA) on the left, former President Donald Trump and North Dakota Governor Doug Burgum during the 2024 Republican National Convention in Milwaukee, Wisconsin, on July 17, 2024. PATRICK T. FALLON / AFP US President-elect Donald Trump on Saturday, December 14, named loyalist Devin Nunes, who heads his social media platform Truth … Read more
Dec 09, 2024Ravie LakshmananThreat Intelligence / Malware The threat actors linked to the Black Basta ransomware have been observed switching up their social engineering tactics, distributing a different set of payloads such as Zbot and DarkGate since early October 2024. “Users within the target environment will be email bombed by the threat actor, which is … Read more
A Kansas City man is accused of hacking into local businesses, not to steal money, but to… get a cheaper gym membership? A DNA-testing firm has vanished, leaving customers in the dark about what’s happened to their sensitive genetic data. And Australia mulls a social media ban for youngsters. All this and much much more … Read more
