Cybersecurity News - Page 25

Shanya provides threat actors with a way to wrap their malware in highly customized, obfuscated code that bypasses most security tools.

The extensions called “Bitcoin Black” and “Codo AI” were disguised as a color theme and AI assistant.

Because the agent interprets the message as legitimate workload, it may execute the destructive steps without prompting the user for approval.

To qualify, researchers must ensure their work is solely aimed at uncovering flaws they did not create and contributes to improved security.

The cyber-espionage activity has primarily targeted users in Turkey, Israel, and Azerbaijan.

In addition to BrickStorm, Warp Panda has also deployed JSP web shells and two new implants for ESXi environments.

In brief: Critical React2Shell exploited by Chinese hackers, Microsoft silently patches Windows LNK flaw, and more.

The latest activity targeted at least two organizations, including Reporters Without Borders (RSF).

The campaign relied on spearphishing emails that delivered PDFs containing links to malicious installers hosted on free file-sharing services.

The campaign ultimately deploys the ValleyRat remote-access tool onto the compromised systems.