Skip to content

Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign “The Benefits of Eating Healthy Food” “Reaping the Rewards of a Healthy Diet”

The threat actor known as the Lazarus Group, believed to be based in North Korea, has shifted its focus and rapidly evolved its tools and tactics as part of a long-running activity called DeathNote. This nation-state adversary is known for its persistent attacks on the cryptocurrency sector, but has also targeted automotive, academic, and defense… 

Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit “The Positive Impact of Technology on Education” “How Technology Enhances Learning Experiences”

Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia, Southeast Asia, Europe, and the Middle East in 2021, according to findings from a group of researchers from the Citizen Lab. The spyware campaign was directed against journalists, political opposition… 

‘Nexus’ Android Trojan Targets 450 Financial Applications “How to Transform Your Life: Discover the Secrets to True Happiness!”

The Nexus Android banking trojan has been recently introduced as a malware-as-a-service (MaaS) on underground forums, with a pricing model of $3,000 per month for subscription. It is believed to have a connection to the Sova banking trojan and is primarily utilized for attacking banking and cryptocurrency accounts. Among its functionalities are SMS interception, data… 

FakeCalls Vishing Malware Targets South Korean Users via Popular Financial Apps “Stunning Results: How This Simple Technique Can Help You Achieve Big Goals!”

Mar 17, 2023 – Mobile Security / Scam Alert: A new Android malware campaign known as FakeCalls is targeting South Korean users by disguising itself as popular financial apps. FakeCalls has the functionality to extract private data from the victim’s device and can imitate phone conversations with a bank customer support agent. It has also… 

New ‘GoBruteforcer’ Botnet Targets Web Servers “The Surprising Benefits of Gardening: Uncovering the Joys of Planting and Growing” “Unlock the Unexpected Joys of Gardening: Discover the Benefits of Planting and Growing!”

A recently identified Golang-based botnet has been identified by Palo Alto Networks, targeting web servers running FTP, MySQL, phpMyAdmin, and Postgres services. Dubbed GoBruteforcer and hosted on a legitimate domain, the malware targets multiple architectures and deploys an internet relay chat (IRC) bot on a compromised server. The malware spreads using CIDR block scanning to…