Lyceum APT Returns, This Time Targeting Tunisian Firms

The APT, which targets Middle-Eastern energy firms & telecoms, has been relatively quiet since its exposure but not entirely silent. It’s kept up attacks through 2021 and is working on…

A Guide to Doing Cyberintelligence on a Restricted Budget

Cybersecurity budget cuts are everywhere. Chad Anderson, senior security researcher at DomainTools, discusses alternatives to fancy tooling, and good human skills alignment. For those in the industry, it comes as…

Malicious Accounts that Targeted Security Researches Were Suspended by Twitter

Two malicious accounts used by threat actors in a seemingly North Korean cyber-espionage campaign were suspended by Twitter. The accounts under discussion are @lagal1990 and @shiftrows13 working as bait for…

Twitter accounts linked to cyberattacks against security researchers suspended

Twitter has suspended accounts belonging to a North Korean hacking group targeting security researchers.  The social media accounts, @lagal1990 and @shiftrows13, were suspended this month after “posing as security researchers,”…

TA505 Gang Is Back With Newly Polished FlawedGrace RAT

TA505 – cybercrime trailblazers with ever-evolving TTPs – have returned to mass-volume email attacks, flashing retooled malware and exotic scripting languages. The TA505 cybercrime group is whirring its financial rip-off…

Time to Build Accountability Back into Cybersecurity

Chris Hass, director of information security and research at Automox, discusses how to assign security responsibility, punishment for poor cyber-hygiene and IDing ‘security champions’ to help small businesses. In the…

Podcast: Could the Zoho Flaw Trigger SolarWinds 2.0?

Companies are worried that the highly privileged password app could let attackers deep inside an enterprise’s footprint, says Redscan’s George Glass. A month ago, the FBI, CISA and the U.S.…

Sinclair Confirms Ransomware Attack That Disrupted TV Stations

A major cyberattack resulted in data being stolen, too, but Sinclair’s not sure which information is now in the hands of the crooks. Sinclair Broadcast Group, which owns hundreds of…

TikTok Serves Up Fresh Gamer Targets via Fake Among Us, Steam Offerings

The tween-friendly video app is being used to serve up malvertising, disguised as free Steam game accounts or Among Us game hacks. TikTok has made people do all sorts of…

Twitter Suspends Accounts Used to Snare Security Researchers

The accounts were used to catfish security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea. Twitter has shuttered two accounts – @lagal1990 and @shiftrows13 –…