Scalable Vector Graphics files pose a novel phishing threat
The SVG file format can harbor malicious HTML, scripts, and malware
Similar Posts
Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
Bys s
A recently disclosed critical security flaw impacting the Aviatrix Controller cloud networking platform has come under active exploitation in the wild to deploy backdoors and cryptocurrency miners. Cloud security firm Wiz said it’s currently responding to “multiple incidents” involving the weaponization of CVE-2024-50603 (CVSS score: 10.0), a maximum severity bug that could result in
CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users
Bys s
A new global phishing threat called “Meta Mirage” has been uncovered, targeting businesses using Meta’s Business Suite. This campaign specifically aims at hijacking high-value accounts, including those managing advertising and official brand pages. Cybersecurity researchers at CTM360 revealed that attackers behind Meta Mirage impersonate official Meta communications, tricking users into handing
Dialysis firm DaVita hit by ransomware attack
Bys s
Reuters reports: DaVita said on Monday it had become aware of a ransomware incident that has encrypted some elements of its network, prompting the dialysis firm to implement measures to limit the effect of the breach. The company discovered the cyberattack on Saturday, but added it “cannot estimate the duration or extent of the disruption…
Ransomware Groups Abuse Microsoft Services for Initial Access
Bys s
Sophos warns of two ransomware groups abusing Microsoft 365 services and default configurations to contact internal enterprise users. The post Ransomware Groups Abuse Microsoft Services for Initial Access appeared first on SecurityWeek.
Medusa ransomware gang demands $2M from UK private health services provider
Bys s
Iain Thomson reports: HCRG Care Group, a private health and social services provider, has seemingly fallen victim to the Medusa ransomware gang, which is threatening to leak what’s claimed to be stolen internal records unless a substantial ransom is paid. Previously known as Virgin Care and now owned by Twenty20 Capital, HCRG runs child and…
DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects
Bys s
Threat actors have been observed targeting Internet Information Services (IIS) servers in Asia as part of a search engine optimization (SEO) manipulation campaign designed to install BadIIS malware. “It is likely that the campaign is financially motivated since redirecting users to illegal gambling websites shows that attackers deploy BadIIS for profit,” Trend Micro researchers Ted…