CyberCureME - Cyber Security Marketplace’s Post

A new remote access trojan, MoonPeak, is actively being deployed by a North Korean hacking group, UAT-5394. This malware only works with specific C2 servers, indicating a tailored approach to bypass defenses. This campaign signals a sophisticated escalation in state-sponsored cyber threats, with MoonPeak being a variant of the open-source Xeno RAT malware. https://lnkd.in/g9z445j7 #cybersecurity

MoonPeak, a variant of the Xeno-RAT, has been identified in phishing campaigns targeting Dropbox, Google Drive, and Microsoft OneDrive. This malware, reportedly used by APT UAT-5394, is continuously evolving to enhance its obfuscation techniques and command-and-control (C2) communications.The use of legitimate cloud storage providers in cyber attacks is a growing trend, reflecting broader shifts in the global ICT sector.#cyberawareness #cybersecurity #Malware #Phishing #CloudSecurity #APT #CyberThreats #ICTTrends #DataProtection

Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations Cybersecurity researchers have revealed a new remote access trojan and information stealer used by Iranian state-sponsored actors to conduct reconnaissance of compromised endpoints and execute malicious commands. Cybersecurity company Check Point has codenamed the malware WezRat, stating that, based on artifacts uploaded to the VirusTotal platform, it has been detected in the wild since at least September 1, 2023. "WezRat can execute commands, take screenshots, upload files, perform keylogging, and steal clipboard content and cookie files," it said in a technical report. "Some functions are performed by separate modules retrieved from the command and control (C&C) server in the form of DLL files, making the backdoor's main component less suspicious." For more details, see the full article below ⬇ #cybersecurity #cyberespionage #malware #phishing https://lnkd.in/egJUAMNH

Chinese state-sponsored actors have been targeting a government agency since at least March 2023 in a cyberespionage campaign that researchers track as Crimson Palace. According to a report from cybersecurity company Sophos, the campaign relied on new malware variants and three different activity clusters that indicate a coordinated attack. While initial access could not be determined, the researchers observed related activity dating to early 2022 that used the custom Nupakage malware previously associated with the Chinese threat group Mustang Panda. #DataSecurity #Privacy #Phishing #Ransomware #Cybersecurity #CyberAttack #DataProtection #DataBreach #Hacked #Infosec 

Discover how the APT33 hacking group’s latest malware, Tickler, is targeting the U.S. government and defense sectors. The blog highlights the urgent need for advanced cybersecurity measures to protect critical infrastructure. Stay informed about these evolving threats with Foresiet.   Read More at: https://lnkd.in/gTjvWbSq   #Foresiet

Interesting to see the results and showing current issues

🛡️ Coathanger Malware Targets Fortigate! Cybercriminals are using Coathanger malware to infiltrate Fortigate devices. 😱 https://lnkd.in/g47tv4Wi 🔍 This is why robust cybersecurity practices and SIEM (Security Information and Event Management) are crucial. They help detect and mitigate these threats early. Protect your network with Layer27’s expert security solutions. Download our "Cyber Security Crysis" Report for insights and strategies. https://layer27.com #CyberSecurity #Malware #Fortigate #Layer27 #ITSecurity #NetworkSecurity #SIEM #DataProtection

The sophistication of cyber threats has escalated dramatically, with malicious actors’ deploying advanced tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection, according to Darktrace. https://lnkd.in/dDt8CguC

A newly discovered vulnerability in Windows is being exploited by infostealer malware, potentially leaving your sensitive data exposed. The Cybersecurity and Infrastructure Security Agency (CISA) is urging immediate action to patch this flaw before it's too late. What You Need to Know: - Targeted Attacks: Hackers are using this flaw to steal personal and financial information. - Critical Updates: Ensure your systems are fully patched to avoid falling victim. - Stay Vigilant: Regular software updates are key to staying secure. Is your business protected against the latest threats? Don’t let vulnerabilities slip through the cracks—take action today. #Cybersecurity #WindowsFlaw #Infostealer #DataProtection #SMBSecurity #ITSupport #MissouriIT #OCCSI

Threat actors exploit SSH credentials to gain unauthorized access to systems and networks, executing malicious activities by leveraging weak or compromised credentials. The misuse of SSH credentials offers a covert entryway for threat actors to compromise and commandeer targeted systems. On January 4th, 2024, the Sysdig Threat Research Team (TRT) unearthed a network mapping tool named SSH-Snake, deployed as a self-propagating worm. The tool was discovered exploiting SSH credentials in its propagation, presenting a substantial threat to network security that requires careful handling. It actively seeks out credentials and shell history to target its next victims, with threat actors presently leveraging the SSH-Snake malware. ~First Hackers News To Continue reading this article, click on this link >>> https://lnkd.in/eUWbqti4 #threatactors #ssh #malicious #compromised #trt #networksecurity #cyberattack #cybersecurity #fhn #firsthackersnews #informationsecurity #latestnews