Latest Cybersecurity Alert- 15 April, 2023
RTM Locker Enforces Strict Rules on Affiliates to Avoid Public Attention:
Trellix detected a new private RaaS group, named Read The Manual (RTM) Locker, that has been leveraging affiliates for ransom. Also, it flies under the radar by avoiding high-profile targets. Moreover, the self-destructive nature of RTM Locker and the wipeout of logs make it a tough game to cr … Read More
Transparent Tribe Eyes Indian Education Sector
SentinelLabs identified a campaign by the Transparent Tribe that targets the Indian education sector via education-themed malicious Office documents propagating Crimson RAT. The group has long been targeting different sectors in India. Hence, vigilance and robust cyber defense strategies are n … Read More
APT28 Leader’s Email Breached by Ukrainian Hackers
Ukrainian hacker group Cyber Resistance claimed to have hacked the personal accounts, emails, and social media of a Russian GRU officer, who is also the leader of APT28. The email hack allowed the hackers to extract sensitive documents along with personal information and photos, and then leak them … Read More
Legion: A Python-Based Hacking Tool Targets Websites and Web Services
The cybercriminal group, which goes by the moniker “Forza Tools,” was seen offering Legion – a Python-based credential harvester and SMTP hijacking tool. The malware targets online email services for phishing and spam attacks. Experts suggest it is likely based on the AndroxGhOst malware and has se … Read More
iPhones Hacked to Drop QuaDream’s KingsPawn Spyware
QuaDream, an Israeli company best known for its malware Reign, has launched the new commercial spyware KingsPawn (a Pegasus-like threat). To begin the attack, iCloud calendar invitations with backdated timestamps are sent to targeted iOS devices. Experts recommend following best practices, suc … Read More
Massive malvertising campaign targets seniors via fake Weebly sites
The malvertising campaign is run via Google ads aimed at seniors. The threat actor is creating hundreds of fake websites via Weebly to host decoy content to fool search engines and crawlers while redirecting victims to a fake computer alert.
Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability
Researchers Disclosure Cisco ISE Broken Access Control Issue
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files.