July 26, 2022

CosmicStrand UEFI Malware Found in Gigabyte, ASUS Motherboards Chinese-speaking hackers have been using since at least 2016 malware that lies virtually undetected in the firmware images for some motherboards, one of the most persistent threats commonly known as a UEFI rootkit. Researchers at cybersecurity company Kaspersky called it CosmicStrand but Read more…

Source Code for Rust-based Info-stealer Released on Hacker Forums The source code for an information-stealing malware coded in Rust has been released for free on hacking forums, with security analysts already reporting that the malware is actively used in attacks. The malware, which the author claims to have developed in Read more…

Hackers Exploited PrestaShop Zero-day to Breach Online Stores Hackers are targeting websites using the PrestaShop platform, leveraging a previously unknown vulnerability chain to perform code execution and potentially steal customers’ payment information. The PrestaShop team issued an urgent warning last Friday, urging the admins of 300,000 shops using its software Read more…

Amadey Malware Pushed via Software Cracks in SmokeLoader Campaign A new version of the Amadey Bot malware is distributed through the SmokeLoader malware, using software cracks and keygen sites as lures. Amadey Bot is a malware strain discovered four years ago, capable of performing system reconnaissance, stealing information, and loading Read more…

QBot Phishing Uses Windows Calculator Sideloading to Infect Devices The operators of the QBot malware have been using the Windows Calculator to side-load the malicious payload on infected computers. DLL side-loading is a common attack method that takes advantage of how Dynamic Link Libraries (DLLs) are handled in Windows. It consists Read more…

North Korean Hackers Attack EU Targets with Konni RAT Malware Threat analysts have uncovered a new campaign attributed to APT37, a North Korean group of hackers, targeting high-value organizations in the Czech Republic, Poland, and other European countries. In this campaign, the hackers use malware known as Konni, a remote Read more…