My Courses
-
Akira and Lynx ransomware are targeting Managed Service Providers (MSPs) by exploiting stolen login credentials and existing vulnerabilities.
Two sophisticated ransomware operations, Akira and Lynx, have emerged as significant threats to Managed Service Providers (MSPs) and small businesses. These ransomware-as-a-service (RaaS) groups have…
-
Lazarus Hackers deceive users into thinking their camera or microphone is disabled in order to deploy the PyLangGhost RAT.
Cybersecurity researchers have recently identified a new social engineering campaign linked to North Korea’s Lazarus Group, which exploits fake camera and microphone errors to manipulate…
-
Fraudulent VPN and spam blocking applications associated with VexTrio are being utilized for advertisement deception and subscription scams.
VexTrio Viper, a malicious ad tech purveyor, has been identified as the developer behind several deceptive applications that have been published on both Apple and…
-
Google’s Salesforce accounts have been compromised in a continuing cyber attack, resulting in the theft of user information by hackers.
Google confirmed that one of its corporate Salesforce instances was compromised in June by the threat group tracked as UNC6040. This incident forms part of…
-
Trend Micro has released patches for vulnerabilities in Apex One that were being exploited in the wild.
Trend Micro has swiftly addressed two critical zero-day vulnerabilities in its Apex One security solution, which may have been actively exploited by Chinese threat actors….
-
According to Meta, WhatsApp has removed 6.8 million accounts associated with criminal scam operations.
Meta has reported that it linked a series of scams to a criminal scam centre operating in Cambodia. The company announced that it successfully disrupted…
-
Mustang Panda is targeting Windows users with malware known as ToneShell, which disguises itself as Google Chrome.
A sophisticated new cyber campaign has emerged, targeting Windows users through a deceptive malware variant known as ToneShell, which masquerades as the legitimate Google Chrome…
-
PLoB: A Framework for Behavioral Fingerprinting to Detect Malicious Login Attempts.
Splunk researchers have developed an innovative system designed to fingerprint post-logon behaviour, leveraging artificial intelligence to detect subtle signals indicative of potential intrusions. This framework,…
-
Malicious actors exploit smart contracts to siphon over $900,000 from user cryptocurrency wallets.
In early 2024, a sophisticated campaign emerged, revealing that cybercriminals were distributing malicious Ethereum smart contracts disguised as lucrative trading bots. These weaponised contracts utilised…
-
Threat actors are using Generative AI to carry out phishing attacks by impersonating government websites.
Cybercriminals have significantly advanced their phishing operations by leveraging generative artificial intelligence tools to create highly convincing replicas of government websites. A recent campaign targeting…