Understanding PikaBot: The Rising Cyber Threat
Background to PikaBot PikaBot is a type of malware that has been gaining notoriety since its emergence in early 2023124. It is a modular trojan,…
Category: Threat Intelligence Alerts
Latest threats and guidance from the cyber and fraud world
Unveiling Tycoon: The Emergence of Phishing-as-a-Service Systems
The Trustwave Spider Labs team uncovered Tycoon Group’s Phishing-as-a-Service operation, offering advanced phishing tools via Telegram. This system is designed to sidestep Microsoft’s two-factor authentication,…
The Resurgence of Anatsa Malware: A Threat to Mobile Banking Security
In recent months, cyber security researchers have observed a worrying surge in the activities of the Anatsa banking trojan, targeting Android users across the United…
Zoom has Released Security Updates to Patch Critical Privilege Escalation Vulnerability
On February 8, 2024, Zoom released security updates to address a critical privilege escalation vulnerability in its software for Windows. This vulnerability could allow attackers…
Microsoft February 2024 Patch Tuesday fixes 73 vulnerabilities and 2 zero-days
On February 2024, Microsoft’s Patch Tuesday saw the release of updates addressing 73 vulnerabilities, including two critical zero-day flaws that were actively exploited. Among these…
Securing SaaS: Navigating Vulnerabilities and Safeguarding Organisational Data
Current cyber security incidents involving SaaS platforms, such as Midnight Blizzard targeting Microsoft and the Cloudflare-Atlassian breach, have outlined the vital significance of safeguarding personal…
VajraSpy Android RAT Campaign Uncovered
Incident Overview: A sophisticated Android Remote Access Trojan (RAT), named VajraSpy, has been identified within 12 applications, half of which were distributed through the official…
Mastodon Users Beware: Critical Vulnerability Allows Account Takeovers
A recently discovered vulnerability in the Mastodon social media platform could allow attackers to take over user accounts. The vulnerability, which has been assigned a…
Trezor Email Provider Hack: What You Need to Know
Trezor, a popular cryptocurrency hardware wallet company, recently reported a breach in its third-party email provider. The incident exposed the email addresses of around 66,000…