FBI warns of 183% increase in losses to cryptocurrency investment scams in 2022
The United States Federal Bureau of Investigation (FBI) has revealed that the cost of investment scams between 2021 and 2022 has increased by 127%. Published…
Category: Threat Intelligence Alerts
Latest threats and guidance from the cyber and fraud world
MQsTTang: Mustang Panda’s new backdoor using QT and MQTT
Description: Researchers at ESET have recently advised on a new backdoor called ‘MQsTTang’ attributed to Chinese hacking group Mustang Panda, believed to be part of a continuing…
New Lockbit ransomware campaign able to avoid anti-virus detection
Description: Researchers at Fortinet’s FortiGuard labs have published an article detailing their observations of a new LockBit ransomware campaign. The LockBit ransomware campaign has been…
New infostealing malware ‘Stealc’ targets over 20 browsers, desktop wallets, and email clients
Description: Researchers at SEKOIA.IO have published an article detailing their discovery of a new information-stealing malware, advertised as Stealc by its developer. Beginning in January 2023, the…
Critical Fortinet remote code execution vulnerability actively exploited by hackers
Affected Devices: Description: Threat actors have been seen actively exploiting a critical vulnerability within Fortinet’s FortiWeb server, intending to create backdoors to compromised devices for…
Widespread ransomware attacks affecting VMware ESXi servers
Affected Systems: Description: A worldwide ransomware campaign targets unpatched VMware ESXI servers that are vulnerable to a remote code execution vulnerability discovered in 2021. The…
Large-scale malware campaign uses Microsoft OneNote files to spread malicious links
Description: Researchers at Sophos have published research detailing a new malware campaign using Microsoft OneNote documents (also called “Notebooks” by Microsoft) to spread malicious files through phishing…
QNAP devices found to have critical code injection vulnerability
Description: A code injection vulnerability with a critical severity rating has been found within QNAP devices running QTS 5.0.1 and QuTS hero h5.0.1. QNAP warns…
Critically vulnerable WordPress plugin ‘LearnPress’ version still used in over 75 thousand websites
Description: Security researchers at Patchstack have published research detailing multiple vulnerabilities within the popular WordPress plugin LearnPress, a free learning management system plugin for WordPress that allows site…