WhatsApp compromise leads to Astaroth deployment
Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence
Similar Posts
China’s CERT warns OpenClaw can inflict nasty wounds
Bys sSimon Sharwood reports: China’s National Computer Network Emergency Response Technical Team has warned locals that the OpenClaw agentic AI tool poses significant security risks. In a Tuesday post to its WeChat account, the CERT warned that OpenClaw has “extremely weak default security configuration” and must therefore be handled with extreme care. The CERT is worried that attackers……
New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials
Bys sSecurity vulnerabilities have been disclosed in Xerox VersaLink C7025 Multifunction printers (MFPs) that could allow attackers to capture authentication credentials via pass-back attacks via Lightweight Directory Access Protocol (LDAP) and SMB/FTP services. “This pass-back style attack leverages a vulnerability that allows a malicious actor to alter the MFP’s configuration and cause the MFP
Pen testers accused of ‘blackmail’ after reporting Eurostar chatbot flaws
Bys sSpeaking of researchers being threatened or maligned for reporting breaches, see this story by Jessica Lyons in The Register: Researchers at Pen Test Partners found four flaws in Eurostar’s public AI chatbot that, among other security issues, could allow an attacker to inject malicious HTML content or trick the bot into leaking system prompts. Their thank……
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations
Bys sSeveral state-sponsored actors, hacktivist entities, and criminal groups from China, Iran, North Korea, and Russia have trained their sights on the defense industrial base (DIB) sector, according to findings from Google Threat Intelligence Group (GTIG). The tech giant’s threat intelligence division said the adversarial targeting of the sector is centered around four key themes: striking…
Introducing Sophos Workspace Protection
Bys sAn integrated bundle of security solutions that protect apps, data, workers, and guests easily and affordably – wherever they are. Categories: Products & Services Tags: Workspace
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
Bys sPierluigi Paganini reports: A leaked database from RAMP gives us a rare look behind the curtain. It shows how cybercrime works when it becomes structured, commercial, and repeatable. Instead of random hackers acting alone, RAMP functioned like a business platform where criminals could sell access, recruit affiliates, advertise ransomware, and negotiate deals in private. What……