First Malware Targeting AWS Lambda Serverless Platform Discovered

First Malware Targeting AWS Lambda Serverless Platform Discovered,

A first-of-its-kind malware targeting Amazon Web Services’ (AWS) Lambda serverless computing platform has been discovered in the wild.
Dubbed « Denonia » after the name of the domain it communicates with, « the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls, » Cado Labs researcher Matt Muir said

,

A first-of-its-kind malware targeting Amazon Web Services’ (AWS) Lambda serverless computing platform has been discovered in the wild.
Dubbed « Denonia » after the name of the domain it communicates with, « the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls, » Cado Labs researcher Matt Muir said

, ,
https://thehackernews.com/2022/04/first-malware-targeting-aws-lambda.html

Hamas-linked Hackers Targeting High-Ranking Israelis Using ‘Catfish’ Lures

Hamas-linked Hackers Targeting High-Ranking Israelis Using ‘Catfish’ Lures

,

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an « elaborate campaign » targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations.
« The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and

,

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an « elaborate campaign » targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations.
« The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and

, ,
https://thehackernews.com/2022/04/hamas-linked-hackers-targeting-high.html

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022,

During the last week of March, three major tech companies – Microsoft, Okta, and HubSpot – reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on

,

During the last week of March, three major tech companies – Microsoft, Okta, and HubSpot – reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on

, ,
https://thehackernews.com/2022/04/into-breach-breaking-down-3-saas-app.html

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps,

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot.
« SharkBot steals credentials and banking information, » Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. « This malware implements a geofencing feature and evasion techniques, which makes it

,

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot.
« SharkBot steals credentials and banking information, » Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. « This malware implements a geofencing feature and evasion techniques, which makes it

, ,
https://thehackernews.com/2022/04/sharkbot-banking-trojan-resurfaces-on.html

Hydra, plus grande place de marché du Darknet et machine à blanchir les bitcoins, démantelée par la police

Hydra, plus grande place de marché du Darknet et machine à blanchir les bitcoins, démantelée par la police,

Cette place de marché proposait non seulement des produits illicites, mais aussi des services financiers dont les pirates russes étaient particulièrement friands.

,

Cette place de marché proposait non seulement des produits illicites, mais aussi des services financiers dont les pirates russes étaient particulièrement friands.

, ,
https://www.01net.com/actualites/hydra-plus-grande-place-de-marche-du-darknet-et-machine-a-blanchir-les-bitcoins-demantelee-par-la-police-2055811.html

Researchers Uncover How Colibri Malware Stays Persistent on Hacked Systems

Researchers Uncover How Colibri Malware Stays Persistent on Hacked Systems,

Cybersecurity researchers have detailed a « simple but efficient » persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign.
« The attack starts with a malicious Word document deploying a Colibri bot that then delivers the Vidar Stealer, » Malwarebytes Labs said in an

,

Cybersecurity researchers have detailed a « simple but efficient » persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign.
« The attack starts with a malicious Word document deploying a Colibri bot that then delivers the Vidar Stealer, » Malwarebytes Labs said in an

, ,
https://thehackernews.com/2022/04/researchers-uncover-how-colibri-malware.html

FBI Shut Down Russia-linked « Cyclops Blink » Botnet That Infected Thousands of Devices

FBI Shut Down Russia-linked « Cyclops Blink » Botnet That Infected Thousands of Devices

,

The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU).
« The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used

,

The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU).
« The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used

, ,
https://thehackernews.com/2022/04/fbi-shut-down-russia-linked-cyclops.html

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products,

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks.
Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 – 9.8), the issues impact VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager

,

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks.
Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 – 9.8), the issues impact VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager

, ,
https://thehackernews.com/2022/04/vmware-releases-critical-patches-for.html

Borat RAT, le malware ultra-complet… qui ne fera rire personne

Borat RAT, le malware ultra-complet… qui ne fera rire personne,

Ce logiciel malveillant combine les fonctions d’espionnage, d’attaques DDoS et de ransomware. De quoi satisfaire tous les besoins des pirates.

,

Ce logiciel malveillant combine les fonctions d’espionnage, d’attaques DDoS et de ransomware. De quoi satisfaire tous les besoins des pirates.

, ,
https://www.01net.com/actualites/borat-rat-le-malware-ultra-complet-qui-ne-fera-rire-personne-2055770.html

Cyber Security WEBINAR — How to Ace Your InfoSec Board Deck

Cyber Security WEBINAR — How to Ace Your InfoSec Board Deck,

Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident response plans, and security policies. On the other, they must be able to communicate the importance of

,

Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident response plans, and security policies. On the other, they must be able to communicate the importance of

, ,
https://thehackernews.com/2021/10/cyber-security-webinar-how-to-ace-your.html