November 18, 2021

Most SS7 Exploit Service Providers on Dark Web are Scammers The existence of Signaling System 7 (SS7) mobile telephony protocol vulnerabilities is something security researchers warned about in 2016, and it only took a year before the first attacks exploiting them were observed. In the years that followed, governments exploited SS7 Read more…

Russian Ransomware Gangs Start Collaborating with Chinese Hackers ​There’s some unusual activity brewing on Russian-speaking cybercrime forums, where hackers appear to be reaching out to Chinese counterparts for collaboration. These attempts to enlist Chinese threat actors are mainly seen on the RAMP hacking forum, which is encouraging Mandarin-speaking actors to Read more…

TikTok Phishing Threatens to Delete Influencers’ Accounts Researchers have observed a new phishing campaign primarily targeting high-profile TikTok accounts belonging to influencers, brand consultants, production studios, and influencers’ managers. Abnormal Security researchers who spotted the attacks, observed two activity peaks while observing the distribution of emails in this particular campaign, on Read more…

US, UK Warn of Iranian Hackers Exploiting Microsoft Exchange, Fortinet US, UK, and Australian cybersecurity agencies warned today of ongoing exploitation of Microsoft Exchange ProxyShell and Fortinet vulnerabilities linked to an Iranian-backed hacking group. The warning was issued as a joint advisory released by the Cybersecurity and Infrastructure Security Agency (CISA), the Read more…

CISA Releases Cybersecurity Response Plans for Federal Agencies The Cybersecurity and Infrastructure Security Agency (CISA) has released new cybersecurity response plans (known as playbooks) for federal civilian executive branch (FCEB) agencies. CISA’s newly published operational procedures are designed to streamline the process of mitigating security vulnerabilities and responding to incidents Read more…

Threat Actors Offer Millions for Zero-days, Developers Talk of Exploit-as-a-Service While mostly hidden in private conversations, details sometimes emerge about the parallel economy of vulnerability exploits on underground forums, revealing just how fat of a wallet some threat actors have. Some adversaries claim multi-million U.S. dollar budgets for acquiring zero-day Read more…

Here are the New Emotet Spam Campaigns Hitting Mailboxes Worldwide The Emotet malware kicked into action yesterday after a ten-month hiatus with multiple spam campaigns delivering malicious documents to mailboxes worldwide. Emotet is a malware infection that is distributed through spam campaigns with malicious attachments. If a user opens the Read more…