Interlock ransomware has launched a new wave of cyberattacks in the United Kingdom, deploying a previously unknown remote access trojan (RAT) dubbed NodeSnake. The campaign marks a shift in tactics for the cybercriminal group, integrating the Node.js-based malware to enhance stealth and persistence within compromised networks. Security researchers report that NodeSnake enables attackers to exert […]
Chief financial officers and senior finance executives across global investment, banking, energy, and insurance sectors are being targeted in a sophisticated spear-phishing campaign deploying the NetBird malware, according to a report from GBHackers News. The operation appears designed to infiltrate high-value corporate environments by compromising executive-level email accounts through deceptive, tailored phishing messages. Once delivered […]
Law enforcement agencies from the U.S., Europe, and other international partners have dismantled AVCheck, a cybercriminal platform used to test and encrypt malware to evade antivirus detection. Officials seized four domains and associated servers as part of Operation Endgame, a multinational crackdown on malware infrastructure. AVCheck offered counter-antivirus (CAV) services and crypting tools, enabling cybercriminals […]
A newly identified information-stealing malware dubbed EDDIESTEALER is using the ClickFix platform as a distribution vector, according to cybersecurity researchers. The malicious software is written in the Rust programming language and employs code obfuscation techniques alongside dynamic command-and-control (C2) tasking, allowing it to evade standard detection tools and adapt to changing environments. EDDIESTEALER’s reliance on […]
A sophisticated malware crypter known as Pure Crypter has been observed bypassing new security features introduced in Windows 11 version 24H2, according to researchers at eSentire. Designed as a modular malware delivery platform, Pure Crypter deploys multiple evasion techniques, including AMSI bypassing, DLL unhooking, and execution delays, to avoid detection by modern security tools. The […]
Fred Hutchinson Cancer Center has agreed to pay over $50 million in the aftermath of a 2023 data breach, earmarking the funds for damages, infrastructure upgrades, and fraud monitoring services. The financial commitment follows a cyberattack that compromised sensitive information, prompting the organization to take corrective measures to mitigate fallout and prevent future incidents. According […]
A coordinated phishing campaign exploiting shared cybercriminal infrastructure has emerged as a growing threat to enterprise Microsoft 365 users, according to researchers at Trustwave. The operation connects the Tycoon2FA Phishing-as-a-Service (PhaaS) platform—active since August 2023—with the threat group Storm-1575, also known as Dadsec. Attackers employ adversary-in-the-middle (AiTM) techniques to bypass multi-factor authentication, distributing phishing emails […]
Germany’s Federal Criminal Police Office (Bundeskriminalamt, or BKA) has identified the alleged leader of the notorious Conti ransomware and TrickBot cybercrime operations as Vitaly Nikolaevich Kovalev, a 36-year-old Russian national. The announcement marks a significant move by German authorities in their ongoing efforts to dismantle international ransomware networks. The BKA publicly named Kovalev, who is […]