Sign in Subscribe

Malware

EDR Killer Tool ‘Poortry’ Evolving: Now Targets Critical Windows Security Components

EDR Killer Tool ‘Poortry’ Evolving: Now Targets Critical Windows Security Components

On August 27, 2024, Sophos X-Ops released an in-depth report detailing the continued evolution of the ‘Poortry’ toolset, a malicious EDR (Endpoint Detection and Response) killer used by several ransomware gangs.

Velvet Ant Threat Group Exploits Zero-Day Vulnerability in Cisco Nexus Switches to Deploy Malware

Velvet Ant Threat Group Exploits Zero-Day Vulnerability in Cisco Nexus Switches to Deploy Malware

On August 22, 2024, Sygnia released a detailed report uncovering a sophisticated cyber espionage campaign conducted by the China-nexus threat group "Velvet Ant." This group recently exploited a zero-day vulnerability (CVE-2024-20399) in Cisco Nexus Switch appliances

Unveiling the Stealthy Memory-Only Malware Exploiting Content Delivery Networks

Unveiling the Stealthy Memory-Only Malware Exploiting Content Delivery Networks

On August 22, 2024, Mandiant released a detailed report on a newly discovered memory-only malware dubbed "PEAKLIGHT." This sophisticated malware employs a complex, multi-stage infection process, leveraging content delivery networks (CDNs) to distribute malicious payloads.

New Backdoor Targeting Taiwan Employs Stealthy Communications

New Backdoor Targeting Taiwan Employs Stealthy Communications

On August 20, 2024, Symantec released a security bulletin revealing a previously unseen backdoor, dubbed "Backdoor.Msupedge," that targets a university in Taiwan.

Xeon Sender: A Repurposed Crimeware Tool Targeting SaaS Credentials for SMS Spam

Xeon Sender: A Repurposed Crimeware Tool Targeting SaaS Credentials for SMS Spam

On August 19, 2024, SentinelOne released a report on the rise and repurposing of Xeon Sender, a Python script initially discovered in 2022, which has since been exploited by various threat actors.

GreenCharlie Infrastructure Linked to US Political Campaign Targeting

GreenCharlie Infrastructure Linked to US Political Campaign Targeting

On August 20, 2024, Insikt Group released a comprehensive threat analysis report revealing a significant link between the Iran-backed GreenCharlie group and recent cyber espionage activities targeting US political campaigns.

Ailurophile Stealer: A New Infostealer Emerges with Customizable Malware Stubs

Ailurophile Stealer: A New Infostealer Emerges with Customizable Malware Stubs

On August 16, 2024, G DATA released a detailed blog post highlighting the emergence of a new info stealer named "Ailurophile Stealer." The malware, developed in PHP, exhibits unique characteristics, particularly its customization options available through a subscription-based web panel.