Cybersecurity

CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign

The decrypted request content is as follows: 1000|87|283|Yes|6.1.7|||” Conclusion In this research, a follow-up to our Water Hydra APT Zero Day campaign analysis, we explored how the DarkGate operators were able to exploit CVE-2024-21412 as a zero-day attack to deploy the complex and evolving DarkGate malware. We also explored how security bypass vulnerabilities can be […]

Cybersecurity

Keyloggers, spyware, and stealers dominate SMB malware detections – Help Net Security

In 2023, 50% of malware detections for SMBs were keyloggers, spyware and stealers, malware that attackers use to steal data and credentials, according to Sophos. Attackers subsequently use this stolen information to gain unauthorized remote access, extort victims, deploy ransomware, and more. Ransomware remains primary cyberthreat for SMBs The Sophos report also analyses initial access […]

Cybersecurity

White House adds teeth to secure software development requirements

Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. The Biden administration approved a long-awaited secure software development attestation form, part of a yearslong effort to secure the nation’s software supply chain through more robust enforcement mechanisms.  The form, which the Cybersecurity and Infrastructure Security Agency […]

Cybersecurity

3 Things CISOs Achieve with Cato

Being a CISO is a balancing act: ensuring organizations are secure without compromising users’ productivity. This requires taking multiple elements into consideration, like cost, complexity, performance and user experience. CISOs around the globe use Cato SSE 360, as part of the Cato SASE Cloud platform to balance these factors without compromise. This article details how […]

Cybersecurity

RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

Mar 14, 2024NewsroomCyber Espionage / Malware The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant (PCA) to execute malicious commands. “The Program Compatibility Assistant Service (pcalua.exe) is a Windows service designed to identify and address compatibility issues with older programs,” Trend Micro said in an analysis […]

Cybersecurity

Canada Sentences LockBit Hacker Mikhail Vasiliev to 4 Years

Fraud Management & Cybercrime , Ransomware Dual Canadian-Russian National Also Agrees to US Extradition Mihir Bagwe (MihirBagwe) • March 13, 2024     LockBit affiliate Mikhail Vasiliev received a four-year prison sentence in Canadian court Tuesday. LockBit ransomware affiliate Mikhail Vasiliev on Tuesday received a nearly four-year prison sentence in Canada and consented to extradition […]