Cisco Talos Analysis: Understanding the Starland RAT Malware

What is a RAT? A Remote Access Trojan (RAT) is a type of malware designed to provide an attacker with remote access to a compromised computer. Once installed, a RAT may allow... Read more »
Claude Mythos Got Banned. Then It Came Back. Here's Why Cybersecurity Should Care

Claude Mythos Got Banned. Then It Came Back. Here’s Why Cybersecurity Should Care

Claude Mythos Got Banned. Then It Came Back. Here’s Why Cybersecurity Should Care. For a brief moment, one of the most talked-about AI models in the cybersecurity community seemed to disappear. Claude... Read more »

The Gentlemen Ransomware: One Infected Laptop, an Entire Network Down

The Gentlemen Ransomware: One Infected Laptop, an Entire Network Down Meet The Gentlemen — ransomware that can take down your whole network without anyone at the keyboard. Picture: how The Gentlemen spreads... Read more »

Hacker’s links with Pakistan Use Golang, Python, and Rust Malware on Indian Targets

Cross-platform malware developed in Python, Golang, and Rust has been connected to a fresh round of attacks against the Indian government, defense, and aerospace industries by the Pakistan-based Transparent Tribe actor. In... Read more »

During a recent MITRE cyberattack, hackers used rogue virtual machines (VMs) to avoid detection.

According to information released by the MITRE Corporation, the threat actor in the cyberattack that targeted the non-profit organization in late December 2023 used rogue virtual machines (VMs) in its VMware environment... Read more »

The SolarMarker Malware Develops a Multi-Tiered Infrastructure to Resist Off Takedown Attempts

The persistent threat actors behind the SolarMarker information-stealing virus have created a multi-tiered infrastructure to confound law enforcement takedown operations, fresh findings from Recorded Future suggest. “The core of SolarMarker’s operations is... Read more »

Microsoft Word Decoys Used to Spread Malware Based on Nim

Decoy Word (MS Word) documents are being used as bait by a new malware infection that provides a backdoor that’s written in the Nim programming language. Researchers at Netskope Ghanashyam Satpathy while... Read more »

CISA and FBI Issue Alert Regarding Double Extortion Attacks Using Rhysida Ransomware

“Observed in the ransomware-as-a-service (RaaS) model, Rhysida actors have hacked entities in education, production, both of information technology, and governments, and any ransom paid is split across the group and affiliates,” the... Read more »

Unidentified Kill Switch Stops Mozi IoT Botnet Activities

  The Mozi botnet’s unanticipated August 2023 decline in malicious activity was caused by a kill switch that was given to the bots. “First, the drop manifested in India on August 8,”... Read more »

Malicious NuGet Packages Found Spreading SeroXen Remote Access Trojan

Researchers studying cybersecurity have discovered a fresh batch of malicious packages that were uploaded to the NuGet package manager via a little-known malware distribution technique. The campaign has been coordinated and ongoing... Read more »