The campaign, authored by an actor calling themself “Vagabon,” looks to collect PayPal login credentials and complete credit card information from the victim. The Vagabon Kit Highlights ‘Frankenstein’ Trend in Phishing (RiskIQ) In early 2021, RiskIQ first detected a new phishing campaign targeting PayPal. Malware found in coa and rc, two npm packages with 23M weekly downloads (The Record by Recorded Future) The security team of the npm JavaScript package manager has warned users that two of its most popular packages had been hijacked by a threat actor who released new versions laced with what appeared to be password-stealing malware.
SSL certificates could be leaking company secrets (Detectify Blog) Detectify Labs research team analyzed over 900 million public SSL/TLS certificates and found they could be leaking company secrets.
Threat Alert: Threat Actors Using release_agent Container Escape (Aqua) Team Nautilus detected a crypto mining campaign that uses a container escape technique to break out from the container and compromise the host Here’s what that means for the cyber threat actor associated with the group. BlackMatter Announces Its End, Ransomware Cycle Continues (Flashpoint) The BlackMatter ransomware collective announced its closure.
0 kommentar(er)
