Home

Careto: A Notorious Threat Group Targets Windows with Microphone Recording and File Theft
Gallery
Careto: A Notorious Threat Group Targets Windows with Microphone Recording and File Theft

Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update, windows

Careto: A Notorious Threat Group Targets Windows with Microphone Recording and File Theft

Recent research links The Mask group to a 2022 attack on a Latin American organization, exploiting an MDaemon email server and WorldClient webmail for persistent access. The initial compromise method [...]

By FHN| December 18th, 2024|Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update, windows|0 Comments

New VIPKeyLogger in Office Docs Steals Credentials
Gallery
New VIPKeyLogger in Office Docs Steals Credentials

Compromised, Exploitation, Internet Security, malicious cyber actors, Security Advisory, Security Update

New VIPKeyLogger in Office Docs Steals Credentials

VIPKeyLogger, similar to the Snake Keylogger, spreads through phishing campaigns via attachments disguised as archive or Microsoft 365 files. It uses malicious Office documents to connect to C2 servers and [...]

By FHN| December 18th, 2024|Compromised, Exploitation, Internet Security, malicious cyber actors, Security Advisory, Security Update|0 Comments

Hackers Exploit Windows Management Console for Backdoor Payloads
Gallery
Hackers Exploit Windows Management Console for Backdoor Payloads

BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update

Hackers Exploit Windows Management Console for Backdoor Payloads

The FLUX#CONSOLE campaign exploits .MSC files to deploy backdoor malware, highlighting advanced phishing and Windows feature abuse. The FLUX#CONSOLE campaign is a multi-stage attack aimed at delivering backdoor malware. It [...]

By FHN| December 18th, 2024|BOTNET, Compromised, Exploitation, Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update|0 Comments

Malicious ads on CAPTCHA pages spread password stealers
Gallery
Malicious ads on CAPTCHA pages spread password stealers

Internet Security, Security Advisory, Security Update, Tips

Malicious ads on CAPTCHA pages spread password stealers

Cybercriminals are using fake CAPTCHA pages to spread password-stealing malware. These fake CAPTCHAs, often appearing as pop-ups, trick users into running harmful PowerShell commands through malicious ads, mimicking legitimate verification [...]

By FHN| December 18th, 2024|Internet Security, Security Advisory, Security Update, Tips|0 Comments

Hackers exploit Apache Struts2 flaw to upload malware
Gallery
Hackers exploit Apache Struts2 flaw to upload malware

Internet Security, malicious cyber actors, Malicious extension, Malware, Security Advisory, Security Update, vulnerability

Hackers exploit Apache Struts2 flaw to upload malware

Hackers are exploiting a new Apache Struts2 vulnerability (CVE-2024-53677) with a critical CVSS score of 9.5, posing severe risks. Apache Struts2 flaw Apache Struts2 recently announced a vulnerability with path-traversal, [...]