Cybersecurity startup Wiz warns of a widespread redirection campaign in which thousands of websites have been compromised using legitimate FTP credentials.
The post Thousands of Websites Hijacked Using Compromised FTP Credentials appeared first on SecurityWeek.
ESET says the BlackLotus UEFI bootkit can bypass secure boot on fully updated Windows 11 systems.
The post BlackLotus Bootkit Can Target Fully Patched Windows 11 Systems appeared first on SecurityWeek.
History has shown that when it comes to ransomware, organizations cannot let their guards down.
The post Ransomware Attacks: Don’t Let Your Guard Down appeared first on SecurityWeek.
In January and February 2023, six law firms were targeted with the GootLoader and SocGholish malware in two separate campaigns.
The post Several Law Firms Targeted in Malware Attacks appeared first on SecurityWeek.
A recently identified post-exploitation framework ‘Exfiltrator-22’ uses the same C&C infrastructure as the LockBit ransomware.
The post New ‘Exfiltrator-22’ Post-Exploitation Framework Linked to Former LockBit Affiliates appeared first on SecurityWeek.
Threat actor uses the PureCrypter downloader to deliver malware to government entities in Asia-Pacific and North America.
The post ‘PureCrypter’ Downloader Used to Deliver Malware to Governments appeared first on SecurityWeek.
Cybercriminals are delivering stealthy cryptojacking malware to Macs using pirated apps and they could use the same method for other malware.
The post Stealthy Mac Malware Delivered via Pirated Apps appeared first on SecurityWeek.
The Frebniis malware abuses a Microsoft IIS feature to deploy a backdoor and monitor all HTTP traffic to the system.
The post ‘Frebniis’ Malware Hijacks Microsoft IIS Function to Deploy Backdoor appeared first on SecurityWeek.
A recent variant of the Mirai malware has been observed targeting 13 IoT vulnerabilities to ensnare devices into a botnet.
The post Mirai Variant V3G4 Targets 13 Vulnerabilities to Infect IoT Devices appeared first on SecurityWeek.
A vulnerability affecting IBM’s Aspera Faspex file transfer solution, tracked as CVE-2022-47986, has been exploited in attacks.
The post Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild appeared first on SecurityWeek.
