threat actors – TFun dot org

Magecart Threat Actors Using Highly Evasive Skimmer to Steal Credit Card Data

05/09/2022RedOne

Cybersecurity researchers at Cyble Research & Intelligence Labs have identified a tweet with a JavaScript skimmer that is mentioned by a security analyst on Twitter. The Magecart threat group has created this skimmer that mainly steals data related to payments from the Magento website, which is an e-commerce platform. By exploiting the security flaws in […]

Threat Actors from China Infiltrated a Major Afghan Telecom Provider

30/09/2021ishaan

Just as the US was completing its withdrawal from Afghanistan, several China-linked cyberespionage groups were seen intensifying attacks on a major telecom corporation. Recorded Future, a threat intelligence firm, reported on Tuesday that it has witnessed four different Chinese threat groups target a mail server belonging to Roshan, a large telecom provider in Afghanistan […]

A Look at the Triple Extortion Ransomware

18/09/2021ishaan

Ransomware has traditionally concentrated on encryption, but one of the most common recent additions is the exfiltration and threatening disclosure of critical data in a “double extortion” assault. Threat actors, on the other hand, must continually develop new ways to enhance the effect of a successful assault since the financial incentives are so high. […]

Years-Long Attack by Chinese-Linked APT Groups Discovered by McAfee

17/09/2021ishaan

A cyber-attack that had been sitting on the target organization’s network for years stealing data was discovered during a McAfee investigation into a suspected malware infection. The sophisticated threat actors utilized a mix of known and novel malware tools in the attack, called Operation Harvest, to infiltrate the victim’s IT infrastructure, exfiltrate data, and […]

Ficker – An Info-Stealer Malware Being Distributed by Russians

16/08/2021ishaan

Threat actors are using the Malware-as-a-Service (MaaS) model to attack Windows users, according to researchers. The new info-stealer malware “Ficker” was discovered and is being disseminated via a Russian underground forum by threat actors. FickerStealer is a family of data-stealing malware that first appeared in the year 2020. It can steal sensitive data such […]

Phishing Campaign that Imitates Legitimate WeTransfer Applications

20/06/2021ishaan

The Cofense Phishing Defense Center (PDC) has discovered a current phishing attempt that uses bogus websites to impersonate official WeTransfer applications. Threat actors can use this to get around email security gateways (SEG) and trick users into providing their credentials. WeTransfer is a file-sharing website that makes it simple for users to share files. […]

Cisco Smart Install Protocol is Still Being Exploited in Cyber-Attacks

14/06/2021ishaan

Five years after Cisco issued its first warning, the Smart Install protocol is still being utilized in assaults, and there are around 18,000 internet-exposed devices that might be targeted by hackers. Smart Install is a plug-and-play configuration and image-management technology from Cisco that allows new switches to be deployed with zero-touch. Smart Install can […]

The Code Testing Company CodeCov Suffers a Data Breach Which Went Undetected for Months

18/04/2021Anushka Agnihotri

U.S. federal authorities are investigating a safety violation at Codecov, which works on selling a tool that allows developers to calculate their codebase coverage and works for more than 29,000 clients worldwide. The organization acknowledged the violation and reported that for months it remained unnoticed. The violation impacted an unaccompanied number of customers, including […]

New Malware Downloader Spotted in Targeted Campaigns

13/04/2021Shruti Jain

In recent weeks, a relatively sophisticated new malware downloader has emerged that, while not widely distributed yet, appears to be gaining momentum. Malwarebytes researchers recently discovered the Saint Bot dropper, as they have termed it, being used as part of the infection chain in targeted campaigns against government institutions in Georgia. Saint Bot was […]

Yanbian Gang Malware Continues With Large-Scale Distribution and C2

12/04/2021Shruti Jain

Fake banking apps laced with malware remain a crucial factor in the success of threat actors. For the Yanbian gang, a criminal group in Yanbian, China that targets organizations across Asia, it’s a skill they have been honing for more than a decade. Since 2013, the Yanbian Gang has been targeting South Korean Android […]