Oktacron - Cyber Security RSS Feeds History

Weaponized Windows Installers Target Graphic Designers in Crypto Heist

cyware Sep 09, 2023 Malware and Vulnerabilities

Attackers execute malicious scripts through a feature of the installer called Custom Action, dropping several payloads — including the M3_Mini_Rat client stub backdoor, Ethereum mining malware PhoenixMiner, and multi-coin mining threat lolMiner.

Notepad++ 8.5.7 Released With Fixes for Four Security Vulnerabilities

cyware Sep 09, 2023 Malware and Vulnerabilities

Notepad++ version 8.5.7 has been released with fixes for multiple buffer overflow zero-days, with one marked as potentially leading to code execution by tricking users into opening specially crafted files.

UK and US Sanction 11 Russians Connected to Notorious Trickbot Group

cyware Sep 09, 2023 Incident Response, Learnings

The individuals targeted by the sanctions “include key actors involved in management and procurement for the Trickbot group, which has ties to Russian intelligence services,” according to the U.S. Treasury.

Active North Korean Campaign Targeting Security Researchers

cyware Sep 09, 2023 Threat Intel & Info Sharing

A new campaign has been discovered with similarities to a previous campaign, including the use of social media sites to build rapport with targets. The threat actors then engage in encrypted messaging and send a malicious file with a 0-day exploit.

DGA Behavior Shifts Raise Cybersecurity Concerns

cyware Sep 09, 2023 Trends, Reports, Analysis

Researchers at Akamai have unearthed a concerning shift in the behavior of dynamically seeded Domain Generation Algorithm (DGA) families within Domain Name System (DNS) traffic data.

CISA, FBI, and CNMF Release Advisory on Multiple Nation-State Threat Actors Exploiting CVE-2022-47966 and CVE-2022-42475

cyware Sep 09, 2023 Threat Intel & Info Sharing

CISA, FBI, and CNMF confirmed that nation-state APT actors exploited CVE-2022-47966 to gain unauthorized access to a public-facing application (Zoho ManageEngine ServiceDesk Plus), establish persistence, and move laterally through the network.

CISA Adds Critical RocketMQ Bug to Must-Patch List

cyware Sep 09, 2023 Threat Intel & Info Sharing

The CISA added CVE-2023-33246 to its Known Exploited Vulnerabilities Catalog. It means government agencies have until September 27 to apply a vendor patch to affected systems, although private enterprises are encouraged to follow suit.

New Phishing Campaign Launched via Google Looker Studio

cyware Sep 09, 2023 Identity Theft, Fraud, Scams

As part of the observed attacks, threat actors are using Google Looker Studio to create fake crypto pages that are then delivered to the intended victims in emails sent from the legitimate tool itself.

Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play

thehackernews Sep 09, 2023 Feed

Spyware masquerading as modified versions of Telegram have been spotted in the Google Play Store that’s designed to harvest sensitive information from compromised Android devices. According to Kaspersky security researcher Igor Golovin, the apps come with nefarious features to capture and exfiltrate names, user IDs, contacts, phone numbers, and chat messages to an actor-controlled server. The

Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks

thehackernews Sep 09, 2023 Feed

A legitimate Windows tool used for creating software packages called Advanced Installer is being abused by threat actors to drop cryptocurrency-mining malware on infected machines since at least November 2021. "The attacker uses Advanced Installer to package other legitimate software installers, such as Adobe Illustrator, Autodesk 3ds Max, and SketchUp Pro, with malicious scripts and uses

Cyber security aggregator - feeds history

Weaponized Windows Installers Target Graphic Designers in Crypto Heist

Notepad++ 8.5.7 Released With Fixes for Four Security Vulnerabilities

UK and US Sanction 11 Russians Connected to Notorious Trickbot Group

Active North Korean Campaign Targeting Security Researchers

DGA Behavior Shifts Raise Cybersecurity Concerns

CISA, FBI, and CNMF Release Advisory on Multiple Nation-State Threat Actors Exploiting CVE-2022-47966 and CVE-2022-42475

CISA Adds Critical RocketMQ Bug to Must-Patch List

New Phishing Campaign Launched via Google Looker Studio

Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play

Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks

202020212022202320242025