TRENDING TOPICS MAR 10, 2025 Ragnar Loader: A Stealthy Backdoor Fueling Ransomware Operations Threat researchers have uncovered new details about Ragnar Loader, a highly modular and evasive malware toolkit used by cybercrime groups, including FIN7, FIN8, Ragnar Locker (Monstrous Mantis), and Ruthless Mantis (ex-REvil). Initially observed in 2020, Ragnar
Cyber Insights
The new Anubis ransomware group has emerged as a significant threat to Microsoft environments, specifically targeting Windows-based infrastructure, backup servers, and enterprise cloud storage.
TRENDING TOPICS MAR 07, 2025 Update: Microsoft Disrupts Massive Malvertising Campaign Using GitHub for Malware Distribution Microsoft has dismantled a large-scale malvertising campaign that compromised nearly one million devices worldwide, leveraging GitHub, Dropbox, and Discord as malware distribution platforms. The attack tracked as Storm-0408, involved injecting malicious ads
01 10 11 TRENDING TOPICS Update: EncryptHub Expands Cybercrime Operations with Phishing, Malware, and Ransomware EncryptHub, a financially driven threat group, has been carrying out advanced phishing campaigns to deliver information stealers and ransomware while developing a new remote access tool called EncryptRAT. This group targets users of popular applications
01 10 11 TRENDING TOPICS Lotus Panda Expands Operations with Evolved Sagerunex Backdoor Lotus Panda, a Chinese threat actor also known as Billbug, Bronze Elgin, Lotus Blossom, Spring Dragon, and Thrip, has been ramping up cyber operations against government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong,
State Sponsored
MONTHLY WRAP MONTHLY WRAP Overview The cybersecurity landscape in February 2025 saw a surge in sophisticated cyber threats, with a continued evolution in attack methodologies, increased exploitation of zero-day vulnerabilities, and a notable escalation in botnet and ransomware activities. State-sponsored actors from Ch
01 10 11 TRENDING TOPICS Android Zero-Day Exploits Exposed in March 2025 Security Update Google has patched 43 security flaws in its March 2025 Android update, including two actively exploited zero-days. One of these, CVE-2024-50302, is a high-severity information disclosure vulnerability in the Linux kernel’
01 10 11 TRENDING TOPICS Ransomware Gangs Exploit Paragon Partition Manager Driver for Privilege Escalation Threat actors exploit a zero-day vulnerability (CVE-2025-0289) in Paragon Partition Manager’s BioNTdrv.sys driver to escalate privileges and execute arbitrary code in ransomware attacks. This flaw is part of a larger
Infostealer malware deployment has surged recently among both financially motivated cybercriminals and espionage-focused APT groups.
01 10 11 Vo1d Botnet Expands, Infecting Over 1.5 Million Android TV Devices A new variant of the Vo1d malware botnet has compromised 1,590,299 Android TV devices across 226 countries, with 800,000 active bots still in operation. This botnet, tracked by XLab since November 2024, has
The combination of effective security evasion, sophisticated techniques, and severe impact classifies this as a high-priority threat. 01001 10110 11010 00101 11100 01111 CYBER INSIGHTS CYBER INSIGHTS Breakdown A widespread malware campaign is exploiting a serious flaw in Windows security by abusing an outda
01 10 11 nRootTag: Bluetooth Exploit Turns Apple’s Find My Network Into a Covert Tracking System Security researchers have identified nRootTag, a Bluetooth-based tracking vulnerability in Apple's Find My network, which could turn nearly any Bluetooth-enabled device into a covert tracking beacon. The exploit takes