3CXDesktopApp compromised in supply chain attack
We understand from a Crowdstrike report that on March 29, 2023, malicious activity was observed emanating from a legitimate, signed binary, 3CXDesktopApp — a softphone application from…
Category: Threat Intelligence Alerts
Latest threats and guidance from the cyber and fraud world
Microsoft Patch Tuesday fixes actively exploited critical vulnerability.
Microsoft’s March 2023 Patch Tuesday includes a fix for a privilege elevation vulnerability that has been seen actively exploited and affects all supported versions of Microsoft Outlook…
FBI warns of 183% increase in losses to cryptocurrency investment scams in 2022
The United States Federal Bureau of Investigation (FBI) has revealed that the cost of investment scams between 2021 and 2022 has increased by 127%. Published…
MQsTTang: Mustang Panda’s new backdoor using QT and MQTT
Description: Researchers at ESET have recently advised on a new backdoor called ‘MQsTTang’ attributed to Chinese hacking group Mustang Panda, believed to be part of a continuing…
New Lockbit ransomware campaign able to avoid anti-virus detection
Description: Researchers at Fortinet’s FortiGuard labs have published an article detailing their observations of a new LockBit ransomware campaign. The LockBit ransomware campaign has been…
New infostealing malware ‘Stealc’ targets over 20 browsers, desktop wallets, and email clients
Description: Researchers at SEKOIA.IO have published an article detailing their discovery of a new information-stealing malware, advertised as Stealc by its developer. Beginning in January 2023, the…
Critical Fortinet remote code execution vulnerability actively exploited by hackers
Affected Devices: Description: Threat actors have been seen actively exploiting a critical vulnerability within Fortinet’s FortiWeb server, intending to create backdoors to compromised devices for…
Widespread ransomware attacks affecting VMware ESXi servers
Affected Systems: Description: A worldwide ransomware campaign targets unpatched VMware ESXI servers that are vulnerable to a remote code execution vulnerability discovered in 2021. The…
Large-scale malware campaign uses Microsoft OneNote files to spread malicious links
Description: Researchers at Sophos have published research detailing a new malware campaign using Microsoft OneNote documents (also called “Notebooks” by Microsoft) to spread malicious files through phishing…
Threat Intel Newsletter
Sign-up to receive the latest threat intel updates and guidance.
Oh no...This form doesn't exist. Head back to the manage forms page and select a different form.