Emotet switched to a new template this week that pretends to be a Microsoft Office message stating that Microsoft Word needs to be updated to add a new feature. Emotet is a malware infection that spreads through emails containing Word documents with malicious macros. When opening these documents, their contents will try to trick the … Continue reading Emotet malware now wants you to upgrade Microsoft Word
Lookout Security debuts a mobile endpoint detection and response offering that will integrate into its mobile security platform. Lookout Security today announced the addition of endpoint detection and response (EDR) to its mobile security platform, a move intended to help protect enterprise smartphones from a wave of malicious apps, vulnerabilities, malicious URLs, and phishing attacks … Continue reading As Smartphones Become a Hot Target, Can Mobile EDR Help?
DHS Cybersecurity and Infrastructure Security Agency (CISA) and the FBI today warned that a Russian state-sponsored APT threat group known as Energetic Bear has hacked and stolen data from US government networks during the last two months. Energetic Bear (also tracked as Berserk Bear, TeamSpy, Dragonfly, Havex, Crouching Yeti, and Koala), a hacking group active … Continue reading Russian state hackers stole data from US government networks
The Egregor ransomware gang is claiming responsibility for the cyberattack on U.S. Bookstore giant Barnes & Noble on October 10th, 2020. The attackers state that they stole unencrypted files as part of the attack. Barnes & Noble is the largest brick-and-mortar bookseller in the United States, with over 600 bookstores in fifty states. The bookseller … Continue reading Barnes & Noble hit by Egregor ransomware, strange data leaked
NPM has removed multiple packages hosted on its repository this week that established connection to remote servers and exfiltrated user data. These 4 packages had collected over 1,000 total downloads over the course of the last few months up until being removed by NPM yesterday. The four packages are: plutov-slack-client - claims to be a … Continue reading NPM nukes NodeJS malware opening Windows, Linux reverse shells