Spyware maker NSO Group confirms acquisition by US investors

Israeli spyware maker NSO Group has confirmed to TechCrunch that a U.S. investment group has acquired the company. NSO spokesperson Oded Hershowitz told TechCrunch on Friday that “an American investment group has invested tens of millions of dollars in the Read More …

ClayRat Android malware spoofs WhatsApp, TikTok and more

A new Android malware variant is posing as popular apps, stealing sensitive files and propagating further. Experts from Zimperium revealed ClayRat, targeting primarily Russian users by spoofing popular Android apps such as WhatsApp, TikTok, Google Photos, or YouTube, distributed mostly Read More …

The Golden Scale: Bling Libra and the Evolving Extortion Economy

In recent months, threat actors claiming to be part of a new conglomerate dubbed Scattered Lapsus$ Hunters (aka ​​SP1D3R HUNTERS, SLSH) have asserted responsibility for laying siege to customer Salesforce tenants as part of a coordinated effort to steal data Read More …

SonicWall confirms all of its cloud backup customers were affected by data breach

All companies using SonicWall’s MySonicWall cloud backup feature have had their firewall configuration files exposed in a recent cyberattack, the company has admitted. After initially claiming “fewer than 5%” of its customer base was affected, the company has revealed the Read More …

Identifying and Mitigating Potential Velociraptor Abuse

Open-source technologies and communities are a big part of the Rapid7 ethos, and that’s not by chance – it’s by design. Rapid7 believe that their Metasploit, AttackerKB, and Velociraptor initiatives help create a strong threat intelligence foundation as well as Read More …

RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits

The Trend Zero Day Initiative (ZDI) Threat Hunting and Trend Research teams have identified a significant RondoDox botnet campaign that targets a wide range of internet-exposed infrastructure. This campaign consists of over 50 exploits, including unpatched router flaws across over Read More …

Inside Russian Market: Uncovering the Botnet Empire

The online cybercrime marketplace, Russian Market, has evolved from selling Remote Desktop Protocol (RDP) access to becoming one of the most active underground hubs for information-stealing malware logs, where stolen user credentials are traded daily. Each compromised login represents a Read More …

Hack on Japan’s biggest brewer renews concerns over cyberattack readiness

Japan’s favorite beer brand is reeling from a cyberattack that paralyzed its production last week. Its factories have started brewing again, and some truckloads of beer are leaving its warehouses, but the attack has spotlighted the poor cybersecurity readiness among Read More …

UK: Two teenagers arrested over cyber-attack on nursery chain

Two 17-year-old boys have been arrested by police investigating a cyber-attack on a chain of nurseries in London. The Metropolitan Police say the pair were arrested at residential addresses in Bishop’s Stortford, Hertfordshire, on suspicion of computer misuse and blackmail. Read More …