Cisco Talos found a malicious campaign using a modularized attack method to distribute Cobalt Strike beacons on compromised endpoints. The initial attack vector is…
Cobalt Strike
Ransomware
As an alternative to Cobalt Strike, hackers use the Sliver toolkit
Threat actors are switching away from the Cobalt Strike suite of penetration testing tools in favor of less similar frameworks. Sliver toolkit, an open-source,…
General
Hackers exploit unpatched Microsoft SQL using Cobalt Strike
Threat actors have targeted vulnerable internet-facing Microsft SQL (MS SQL) servers. The attacks entail planting the Cobalt Strike adversary simulation tool in the targeted…
Cobalt Strike
SQUIRRELWAFFLE used for deploying Qakboat and Cobalt Strike
Many spam emails are acting as a channel for an unknown malware loader. The malware loader is undocumented, and it allows attackers to access…
Cybersecurity
Cobalt Strike Usage By Threat Actors Rapidly Boomed; Proofpoint
In the latest research conducted by Proofpoint, it has come forth that adversaries are increasingly using Cobalt Strike, which is an authentic software tool…
Black Basta Ransomware
Swiss Multinational ABB Suffers Black Basta Ransomware Attack
Swiss multinational company ABB, a foremost electrification and automation technology provider. It has been the latest victim of a Black Basta Ransomware attack, impacting…
Ransomware
Veeam Backup Servers Targeted by Threat Actors Accompanied by Ransomware Gangs
At least one group of threat actors, known to operate with various high-profile ransomware gangs, has targeted Veeam backup servers. The attackers took advantage…
Bumblebee Malware
Google Ad Campaign Delivers Bumblebee Malware
A new malware campaign utilizing Google ads and SEO poisoning has been discovered. Dubbed Bumblebee, this malware targets corporate users. It is through Google…
Windows
Vulnerabilities in Sunlogin- Hackers Backdoored Windows
A new hacking campaign has emerged that exploits the vulnerabilities in Sunlogin. It is to deploy the Sliver post-exploitation toolkit and launch Windows Bring…
Ransomware
TrueBot malware is utilized by Clop ransomware to acquire network access.
Security specialists have noticed an expansion in the quantity of hardware tainted with TrueBot malware downloader created by Quietness, a Russian-talking hacking bunch. The…