Researchers from multiple firms say that the campaign seems to come from a loosely connected ecosystem of fraud groups rather than one single actor. Each group has its own versions of the Badbox 2.0 backdoor and malware modules and distributes… Read More "1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers"
Mar 05, 2025Ravie LakshmananOpen Source / Malware Cybersecurity researchers are alerting of an ongoing malicious campaign targeting the Go ecosystem with typosquatted modules that are designed to deploy loader malware on Linux and Apple macOS systems. “The threat actor has… Read More "Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems"
How it works: Attackers typically encrypt systems after exfiltrating sensitive data. Play keeps a fairly low profile on the dark web aside from its leak site, not advertising itself on dark web forums. “It has even claimed not to be… Read More "The dirty dozen: 12 worst ransomware groups active today"
The European online gambling (iGaming) sector is suffering multibillion-euro losses to fraud each year, according to new research from Sumsub. The identity verification firm revealed that nearly half (47%) of the compliance professionals it asked lost over 10% of their… Read More "Half of Online Gambling Firms Lose 10% of Revenue to Fraud"
If you’re involved in IT risk or cybersecurity, you’ve probably encountered BitSight Technologies. It is one of a wave of promised solutions to the growing problem of managing third-party risk posed by your IT vendors in the cloud. In the past, Third-Party Risk Management and Vendor Risk Management was… Read More "BitSight Alternative for Managing Cyber Risk in 2025"
Übermäßig komplexe, unnötige oder unsinnige Sicherheitsmaßnahmen können Mitarbeiter nachhaltig frustrieren. Das schafft neue Risiken. Foto: vchal | shutterstock.com Je mehr Zwang besteht, Systeme und Daten zu schützen, desto besser ist es um die Security bestellt. So zumindest die Annahme einiger… Read More "User-Experience-Irrwege: 5 Fehler, die Ihre Sicherheit gefährden"
Nearly all (93%) organizations have introduced policy changes over the past 12 months to address rising CISO personal liability risks, according to new research by cloud service provider Fastly. This includes 41% of organizations increasing CISO participation in strategic decisions… Read More "CISO Liability Risks Spur Policy Changes at 93% of Organizations"
Despite seeming like somewhat of a no-brainer, using the power of the cloud to combat cloud-based security threats has really only come into vogue recently. As organizations continue to move their infrastructures out of physical data centers into the cloud,… Read More "FireEye vs Palo Alto Networks WildFire"
Mar 04, 2025Ravie LakshmananNetwork Security / Ransomware Internet service providers (ISPs) in China and the West Coast of the United States have become the target of a mass exploitation campaign that deploys information stealers and cryptocurrency miners on compromised hosts.… Read More "Over 4,000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers"
In response to a query for more details, Proofpoint said the message “leveraged the trusted relationship between the compromised sender and the targets by using a business-to-business sales lure”, including an order form and a backgrounder on the company. The… Read More "Polyglot files used to spread new backdoor"
