Malware Makers Using ‘Exotic’ Programming Languages

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Malware as-a-Service Google: Attackers Leverage Social Media Accounts Akshaya Asokan (asokan_akshaya) • April 2, 2021     Screenshot of the fake “SecuriElite” website (Source: Google TAG) A North Korean government-backed threat group that was detected targeting security researchers in January is once again staging a…

Microsoft’s Digital Crimes Unit (DCU) has seized 17 malicious domains used by scammers in a business email compromise (BEC) campaign targeting the company’s customers. The domains taken down by Microsoft were so-called “homoglyph” domains registered to resemble those of legitimate business. This technique allowed the threat actors to impersonate companies when communicating with their clients. According to the complaint filed…

3rd Party Risk Management , Application Security , Critical Infrastructure Security Flaw in Serv-U File-Transfer Software Unconnected to Orion Supply Chain Attack Akshaya Asokan (asokan_akshaya) • July 13, 2021     Attackers have been exploiting a newly discovered zero-day flaw in SolarWinds software, the security vendor has warned. See Also: Live Panel | Zero Trusts…

America’s top law enforcement agency “obtained a court order that allowed it to remove a backdoor program from hundreds of private Microsoft Exchange servers that were hacked through zero-day vulnerabilities earlier this year,” reports CSO. (Thanks to detritus. (Slashdot reader #46,421) for sharing the news…) Earlier this week, the Department of Justice announced that the…

A new Unc0ver jailbreak tool works on almost every iPhone, including the iPhone 12. It is based on the same vulnerability Apple said may have been been actively exploited by hackers. The approach works on iPhones running iOS 11 through to iOS 14.3, as Apple patched the flaws in iOS 14.4… TechCrunch reports: In a…

Electronic Arts, the publisher of the Battlefield series and many other popular video game franchises, has been hacked. On multiple underground hacking forums, Motherboard found hackers claiming they had taken more than 780GB of data from the company. According to screenshots seen by the outlet, the trove includes the source code for FIFA 2021 and both…