TRENDING TOPICS APR 02, 2025 Update: Hijack Loader Upgraded with New Anti-Detection and Persistence Techniques Hijack Loader, a malware loader active since 2023, has received significant updates to improve its stealth and persistence. One of the main changes is the introduction of call stack spoofing, which manipulates how function calls
State Sponsored
This is a detailed cybersecurity threat intelligence report providing an overview of recent cyber threats, including ransomware operations, nation-state activities, emerging attack vectors, and industry-specific targeting patterns.
Vishing
TRENDING TOPICS APR 01, 2025 Update: Teams Vishing Campaign Shifts Toward Persistence and Stealth A recent intrusion analyzed by Ontinue’s Cyber Defense Centre demonstrates the continued evolution of Teams-based vishing campaigns, first observed in late 2024 and previously linked to Storm-1811. In this case, attackers-initiated contact through Microsoft Teams
Phishing
TRENDING TOPICS MAR 31, 2025 Attackers Weaponizing SVG Files for Phishing and Malware Delivery Threat actors have shifted toward using SVG files to distribute phishing malware, taking advantage of the format's ability to embed scripts while remaining visually harmless. These XML-based vector image files can contain JavaScript and
CoffeeLoader
TRENDING TOPICS MAR 28, 2025 CoffeeLoader: A Stealthy New Malware Loader Using GPU-Based Evasion The CoffeeLoader is a newly identified malware loader that began circulating in late 2024. Its primary function is to download and execute second-stage payloads, and it's been engineered specifically to evade antivirus and endpoint
FamousSparrow
TRENDING TOPICS MAR 27, 2025 FamousSparrow Upgrades Toolkit in Targeted Attacks on U.S. and Mexico The Chinese threat actor FamousSparrow launched coordinated attacks on a U.S. trade group and a Mexican research institute in late 2024 and early 2025, marking a significant evolution in their tactics and toolset.
Sandbox
TRENDING TOPICS MAR 26, 2025 Malicious NPM Packages Inject Persistent Backdoors into Trusted Libraries Two newly discovered npm packages, ethers-provider2, and ethers-providerz, were found to be intentionally designed to compromise trusted libraries installed in a developer’s local environment. Once installed, these packages acted as downloaders that retrieved a second-stage
Rilide
TRENDING TOPICS MAR 25, 2025 Rilide: Covert Browser Extension Malware Exploiting Chromium Platforms Rilide is a sophisticated browser extension-based malware that targets users of Chromium-based browsers, primarily Google Chrome and Microsoft Edge. Disguised as a legitimate Google Drive utility, it tricks users into installing it by presenting itself as a
Oracle
Oracle Cloud experienced a significant data breach, where threat actor "Rose87168" allegedly exfiltrated six million records from by exploiting a vulnerability in Oracle Access Manager, potentially affecting over 140,000 enterprise tenants.
Gootloader
TRENDING TOPICS MAR 24, 2025 FBI Issues Warning Over Malware-Infested Online File Converter Tools The FBI warns that cybercriminals abuse free online document converter tools to deliver malware and steal sensitive information. These fraudulent websites pose as legitimate file converters or merging tools, often appearing in paid search engine results
Medusa
TRENDING TOPICS MAR 21, 2025 Update: ABYSSWORKER Driver: Stealth Tool in MEDUSA Ransomware Operations Elastic Security Labs has uncovered a custom malicious driver, ABYSSWORKER, which is critical in executing MEDUSA ransomware attacks. This driver is engineered to disable endpoint detection and response (EDR) systems, creating a blind spot for security
HellCat
TRENDING TOPICS MAR 20, 2025 HellCat Hackers Exploit Jira Servers in Cyberattack on Ascom Swiss telecommunications company Ascom has confirmed a cyberattack targeting its IT infrastructure, with HellCat, a known hacker group, claiming responsibility. The attackers breached Ascom’s Jira-based technical ticketing system, potentially exposing 44GB of stolen data, including