Home

SideWinder APT Using New WarHawk Backdoor to Target Entities in Pakistan
Gallery
SideWinder APT Using New WarHawk Backdoor to Target Entities in Pakistan

Malware, Internet Security, malicious cyber actors, Security Advisory, Security Update

SideWinder APT Using New WarHawk Backdoor to Target Entities in Pakistan

SideWinder, a prolific nation-state actor mainly known for targeting Pakistan military entities, compromised the official website of the National Electric Power Regulatory Authority (NEPRA) to deliver a tailored malware called WarHawk. [...]

By FHN| October 25th, 2022|Malware, Internet Security, malicious cyber actors, Security Advisory, Security Update|0 Comments

Ursnif Malware Moving to Ransomware Operations from Bank Account Theft
Gallery
Ursnif Malware Moving to Ransomware Operations from Bank Account Theft

Malware, Internet Security, Mobile Security, Ransomware, Security Advisory, Security Update

Ursnif Malware Moving to Ransomware Operations from Bank Account Theft

Ursnif (a.k.a. Gozi), a former banking trojan, has been repurposed as a generic backdoor. Threat actors could use the new variant to distribute ransomware. Ursnif (a.k.a. Gozi), a former banking trojan, has been repurposed [...]

By FHN| October 25th, 2022|Malware, Internet Security, Mobile Security, Ransomware, Security Advisory, Security Update|0 Comments

New Prestige Ransomware Targeting Polish and Ukrainian Organizations
Gallery
New Prestige Ransomware Targeting Polish and Ukrainian Organizations

Security Update, Compromised, Internet Security, malicious cyber actors, Ransomware, Security Advisory

New Prestige Ransomware Targeting Polish and Ukrainian Organizations

The Prestige ransomware first appeared in the threat landscape on October 11 in attacks occurring within an hour of each other across all victims. A notable feature of this campaign [...]

By FHN| October 18th, 2022|Security Update, Compromised, Internet Security, malicious cyber actors, Ransomware, Security Advisory|0 Comments

Venus Ransomware targets publicly exposed Remote Desktop services
Gallery
Venus Ransomware targets publicly exposed Remote Desktop services

Exploitation, malicious cyber actors, Malicious extension, Malware, Security Advisory, Security Update

Venus Ransomware targets publicly exposed Remote Desktop services

The malicious actors behind the relatively new Venus ransomware are hacking publicly exposed Remote Desktop Services to encrypt Windows devices. Venus Ransomware The Venus Ransomware seems to have started operating [...]

By FHN| October 17th, 2022|Exploitation, malicious cyber actors, Malicious extension, Malware, Security Advisory, Security Update|0 Comments

New Chinese Cyberespionage Group Targeting IT Service Providers and Telcos
Gallery
New Chinese Cyberespionage Group Targeting IT Service Providers and Telcos

malicious cyber actors, Malicious extension, Malware, Security Advisory, Security Update

New Chinese Cyberespionage Group Targeting IT Service Providers and Telcos

Telecommunications and IT company providers in the Middle East and Asia are currently being specific by a beforehand undocumented Chinese-talking menace team dubbed WIP19. "Throughout this activity, the threat actor [...]