April 27, 2022

US Offers $10 million Reward for Tips on Russian Sandworm Hackers The U.S. is offering up to $10 million to identify or locate six Russian GRU hackers who are part of the notorious Sandworm hacking group. This bounty is being offered as part of the Department of State’s Rewards for Justice Read more…

Emotet Malware Now iIstalls via PowerShell in Windows Shortcut Files The Emotet botnet is now using Windows shortcut files (.LNK) containing PowerShell commands to infect victims computers, moving away from Microsoft Office macros that are now disabled by default. The use of .LNK files is not new, as the Emotet Read more…

American Dental Association Hit by New Black Basta Ransomware The American Dental Association (ADA) was hit by a weekend cyberattack, causing them to shut down portions of their network while investigating the attack. The ADA is a dentist and oral hygiene advocacy association providing training, workshops, and courses to its Read more…

Coca-Cola Investigates Hackers’ Claims of Breach and Data Theft Coca-Cola, the world’s largest soft drinks maker, has confirmed in a statement to BleepingComputer that it is aware of the reports about a cyberattack on its network and is currently investigating the claims. The American beverage giant has started to investigate Read more…

Google Play Store Now Forces Apps to Disclose What Data is Collected Google is rolling out a new Data Safety section on the Play Store, Android’s official app repository, where developers must declare what data their software collects from users of their apps. This will be like a privacy label Read more…

Public Interest in Log4Shell Fades but Attack Surface Remains It’s been four months since Log4Shell, a critical zero-day vulnerability in the ubiquitous Apache Log4j library, was discovered, and threat analysts warn that the application of the available fixes is still way behind. Although the public interest and focus of the Read more…

CISA Adds 7 Vulnerabilities to List of Bugs Exploited in Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its list of actively exploited security issues, including those from Microsoft, Linux, and Jenkins. The ‘Known Exploited Vulnerabilities Catalog’ is a list of vulnerabilities known to be Read more…

Emotet Malware Infects Users Again After Fixing Broken Installer The Emotet malware phishing campaign is up and running again after the threat actors fixed a bug preventing people from becoming infected when they opened malicious email attachments. Emotet is a malware infection distributed through spam campaigns with malicious attachments. If Read more…

North Korean Hackers Targeting Journalists with Novel Malware North Korean state-sponsored hackers known as APT37 have been discovered targeting journalists specializing in the DPRK with a novel malware strain. The malware is distributed through a phishing attack first discovered by NK News, an American news site dedicated to covering news Read more…