South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware
An undisclosed South Korean enterprise resource planning (ERP) vendor's product update server has been discovered to be exploited to deploy a Go…
Threat Intelligence
DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks
Cyber operations utilizing the DarkGate malware-as-a-service (MaaS) operation have changed away from AutoIt scripts to an AutoHotkey method to deliv…
Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices
Microsoft has stressed the importance for safeguarding internet-exposed operational technology (OT) devices after a string of cyber assaults targeti…
eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners
A new malware operation has been exploiting the updating mechanism of the eScan antivirus program to disseminate backdoors and cryptocurrency miners…
Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications
Threat actors have been increasingly weaponizing Microsoft Graph API for malevolent purposes with the objective of evading discovery. This is done t…