Tag: cybercriminal
-
Hacker News: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
Source URL: https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/ Source: Hacker News Title: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses alarming connections between a notorious bulletproof hosting provider, Prospero OOO, and Kaspersky Lab, a leading cybersecurity firm. The implications of this association raise serious security concerns, especially…
-
Hacker News: Kaspersky exposes hidden malware on GitHub stealing personal data
Source URL: https://www.kaspersky.com/about/press-releases/kaspersky-exposes-hidden-malware-on-github-stealing-personal-data-and-485000-in-bitcoin Source: Hacker News Title: Kaspersky exposes hidden malware on GitHub stealing personal data Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the discovery of a malicious campaign dubbed GitVenom by Kaspersky’s Global Research & Analysis Team, targeting gamers and crypto investors through compromised open-source repositories on GitHub. It…
-
Hacker News: The GitVenom campaign: cryptocurrency theft using GitHub
Source URL: https://securelist.com/gitvenom-campaign/115694/ Source: Hacker News Title: The GitVenom campaign: cryptocurrency theft using GitHub Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the GitVenom campaign, which involves threat actors creating fake open-source projects on GitHub to distribute malicious code. These projects appear legitimate and lure unsuspecting users, emphasizing the need for…
-
Krebs on Security: Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab
Source URL: https://krebsonsecurity.com/2025/02/notorious-malware-spam-host-prospero-moves-to-kaspersky-lab/ Source: Krebs on Security Title: Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab Feedly Summary: One of the most notorious providers of abuse-friendly “bulletproof" web hosting for cybercriminals has started routing its operations through networks run by the Russian antivirus and security firm Kaspersky Lab, KrebsOnSecurity has learned. AI Summary and…
-
Cloud Blog: Cloud CISO Perspectives: Prepare early for PQC to be resilient against tomorrow’s cryptographic threats
Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-prepare-early-for-PQC-resilient-cryptographic-threats/ Source: Cloud Blog Title: Cloud CISO Perspectives: Prepare early for PQC to be resilient against tomorrow’s cryptographic threats Feedly Summary: Welcome to the second Cloud CISO Perspectives for February 2025. Today, Christiane Peters from our Office of the CISO explains why post-quantum cryptography may seem like the future’s problem, but it will…
-
The Register: Bybit declares war on North Korea’s Lazarus crime-ring to regain $1.5B stolen from wallet
Source URL: https://www.theregister.com/2025/02/26/bybit_lazarus_bounty/ Source: The Register Title: Bybit declares war on North Korea’s Lazarus crime-ring to regain $1.5B stolen from wallet Feedly Summary: Up to $140M in bounty rewards for return of Ethereum allegedly pilfered by hermit nation Cryptocurrency exchange Bybit, just days after suspected North Korean operatives stole $1.5 billion in Ethereum from it,…
-
The Register: Malware variants that target operational tech systems are very rare – but 2 were found last year
Source URL: https://www.theregister.com/2025/02/25/new_ics_malware_dragos/ Source: The Register Title: Malware variants that target operational tech systems are very rare – but 2 were found last year Feedly Summary: Fuxnet and FrostyGoop were both used in the Russia-Ukraine war Two new malware variants specifically designed to disrupt critical industrial processes were set loose on operational technology networks last…
-
The Register: Southern Water takes the fifth over alleged $750K Black Basta ransom offer
Source URL: https://www.theregister.com/2025/02/25/southern_water_black_basta_leak/ Source: The Register Title: Southern Water takes the fifth over alleged $750K Black Basta ransom offer Feedly Summary: Leaked chats and spilled secrets as AI helps decode circa 200K private talks Southern Water neither confirms nor denies offering Black Basta a $750,000 ransom payment following its ransomware attack in 2024.… AI Summary…
-
Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog
Source URL: https://www.cisa.gov/news-events/alerts/2025/02/24/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious…