Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw, which the company addressed late last month.
The ongoing activity was detected by Bad Packets on June 3 and corroborated yesterday by security researcher Kevin Beaumont. “Mass scanning activity detected from 104.40.252.159 checking for
Exchange Servers Under Active Attack via ProxyShell Bugs
New Delhi, July 25 (IANS) Microsoft has warned customers about a new crypto mining malware that can steal credentials, remove security controls, spread via emails and ultimately drop more tools for human-operated activity. Called ‘LemonDuck’, the crypto mining malware is targeting Windows and Linux systems, spreading via phishing emails, exploits, USB devices and brute force…
Business Email Compromise (BEC),Fraud Management & Cybercrime,Fraud Risk Management West African Crime Group Used Homoglyph Techniques to Trick Victims, Company SaysDoug Olenick (DougOlenick) •July 21, 2021 Microsoft has announced the takedown of 17 domains that a threat group operating out of West Africa used to host fake Microsoft websites when conducting business email…
Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Faces Up to 20 Years in Prison for Money Laundering Conspiracy Prajeet Nair (@prajeetspeaks) • April 1, 2021 The shuttered DeepDotWeb portal An Israeli citizen who served as the administrator of the now-shuttered DeepDotWeb portal that connected internet users with darknet marketplaces has…
Cybercrime , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime Russian President Says He’s Open to Cybercriminal Extraditions – If They Are Mutual Prajeet Nair (@prajeetspeaks) • June 15, 2021 Russian President Vladimir Putin Russian President Vladimir Putin on Sunday indicated he would consider handing over Russian cybercriminals to the United States…
Threat actors are exploiting Google Docs by hosting their attacks within the web-based document service in a new phishing campaign that delivers malicious links aimed at stealing victims’ credentials. Researchers at email and collaboration security firm Avanan discovered the campaign, which is the….
