alt=1. A red triangle featuring a prominent hook attached to its base, symbolizing strength and stability.

2024-08-28 Post a Comment

Microsoft Sway abused in massive QR code phishing campaign

By Sergiu Gatlan â€‹A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users into handing over their credentials. The attacks were spotted by Netskope Threat Labs in July 2024 after detecting a dramatic 2,000-fold increase in attacks exploiting Microsoft Sway to host phishing pages that steal Microsoft 365 credentials. This surge sharply contrasts the minimal […]

alt=1. A man wearing a hoodie with bright, glowing eyes, creating an intense and mysterious atmosphere.

Cyber security

2024-08-28 Post a Comment

Stealthy ‘sedexp’ Linux malware evaded detection for two years

By Bill Toulas A stealthy Linux malware named ‘sedexp’ has been evading detection since 2022 by using a persistence technique not yet included in the MITRE ATT&CK framework. The malware was discovered by risk management firm Stroz Friedberg, an Aon Insurance company, and enables its operators to create reverse shells for remote access and to further the the attack. “At the time of this writing, the persistence technique used (udev […]

Cyber security

2024-02-05 Post a Comment

The best VPN for beginners

By Olivia Powell Contributions from Krishi Chowdhary Are VPNs safe? Yes, VPNs are generally safe to use. If you don’t want to second-guess your choice of a secure VPN, make sure you pick one from our list of the best VPN servicesâ€”all of them follow a strict no-logs policy, support the most secure protocols (WireGuard, OpenVPN, and IKEv2), offer industry-standard AES-256 encryption, and come with security features like a kill switch […]

alt=A spider on a computer screen, indicating the presence of malware.

Cyber security

2023-12-20 Post a Comment

New Malvertising Campaign Distributing PikaBot Disguised as Popular Software

The malware loader known as PikaBot is being distributed as part of aÂ malvertisingÂ campaignÂ targeting users searching for legitimate software like AnyDesk. “PikaBot was previously only distributed via malspam campaigns similarly to QakBot and emerged as one of the preferred payloads for a threat actor known as TA577,” Malwarebytes’ JÃ©rÃ´me SeguraÂ said. The malware family, whichÂ firstÂ appearedÂ in early 2023, consists of a loader and a core module that allows it to operate as a […]