Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign Summary Microsoft disclosed it has revoked more than 200 code-signing certificates abused by a threat actor tracked as Vanilla Tempest…
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts Summary Author style: Punchy — this piece flags a clear escalation: a DPRK-linked group has adopted EtherHiding to…
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites Summary Google’s Threat Intelligence Group (GTIG) has documented a financially motivated actor tracked as UNC5142 that leverages compromised…
LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets Summary Researchers at Synacktiv uncovered a new GNU/Linux rootkit called LinkPro after investigating an AWS-hosted compromise. Attackers…
North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware Summary Cisco Talos has observed a North Korean-linked threat cluster (tracked under many names including Famous Chollima and UNC5342)…
