Live and recent posts from across the Fediverse tagged #fortiguardlabs, aggregated by home.social.
The ClingSTUN backdoor hijacks unpatched IoT devices and hides in traffic to public STUN servers. Learn how it spreads and how to stop it.
#ClingSTUN #LinuxMalware #IoT #STUN #Botnet #ProxyBackdoor #FortiGuardLabs #CyberSecurity
https://securityonline.info/clingstun-backdoor/?utm_source=mastodon&utm_medium=jetpack_social
Global Threat Landscape Report 2026: l’AI guida il cybercrime: Secondo il Global Threat Landscape Report 2026 dei FortiGuard Labs, gli attacchi informatici guidati dall’intelligenza artificiale stanno aumentando velocita’...
#GlobalThreatLandscapeReport #FortiGuardLabs #intelligenzaartificiale #attacchiinformatici http://dlvr.it/TSfyjN
AI-Driven Cybercrime Fuels 389% Surge in Ransomware Victims
Get ready for a wake-up call: ransomware victims have skyrocketed by 389% in just one year, thanks to cybercriminals harnessing the power of AI to launch more sophisticated attacks. This alarming trend is driven by the growing availability of malicious AI tools, making it easier for hackers to wreak havoc.
#Ransomware #AidrivenCybercrime #EmergingThreats #FortiguardLabs #ThreatIntelligence
Fake Voicemail Emails Install UpCrypter Malware on Windows – Source:hackread.com https://ciso2ciso.com/fake-voicemail-emails-install-upcrypter-malware-on-windows-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #FortiGuardLabs #cybersecurity #PhishingScam #BabylonRAT #UpCrypter #Fortinet #Hackread #PureHVNC #security #malware #Windows #DcRAT
Fake Voicemail Emails Installs UpCrypter Malware on Windows https://hackread.com/fake-voicemail-emails-install-upcrypter-malware-windows/ #FortiGuardLabs #Cybersecurity #PhishingScam #BabylonRAT #UpCrypter #Security #Fortinet #PureHVNC #Malware #Windows #DcRAT
Over 1000 Malicious Packages Found Exploiting Open-Source Platforms – Source:hackread.com https://ciso2ciso.com/over-1000-malicious-packages-found-exploiting-open-source-platforms-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #FortiGuardLabs #cybersecurity #CyberAttack #OpenSource #Hackread #security #malware
Over 1000 Malicious Packages Found Exploiting Open-Source Platforms https://hackread.com/malicious-packages-exploiting-open-source-platforms/ #FortiGuardLabs #Cybersecurity #CyberAttack #OpenSource #Security #Malware
La "stagione degli acquisti" nel mirino di minacce informatiche avanzate: Durante le festivita’, i consumatori di tutto il mondo "corrono" agli acquisti, pronti a cogliere le migliori occasioni. Il conseguente aumento dell’attivita’...
#Fortinet #sicurezzainformatica #cybercrime #FortiGuardLabs #intelligenzaartificiale http://dlvr.it/TH493X
Fake web stores and evolving cyberattacks pose new perils for holiday shoppers, according to recent reports. https://jpmellojr.blogspot.com/2024/11/fake-web-stores-evolving-cyberattacks.html #HolidayShopping #OnlineFraud #ECommerce #Netcraft #Fortinet #FortiGuardLabs
Burning Zero Days: Suspected Nation-State Adversary Targets Ivanti CSA
A zero-day vulnerability exploited by an advanced adversary to gain access to a victim’s network, according to research by FortiGuard Labs and the Centre for Strategic Intelligence (CISA).
Pulse ID: 670eaec50e8004d11d044338
Pulse Link: https://otx.alienvault.com/pulse/670eaec50e8004d11d044338
Pulse Author: AlienVault
Created: 2024-10-15 18:04:52
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CISA #CyberSecurity #FortiGuard #FortiGuardLabs #InfoSec #Ivanti #OTX #OpenThreatExchange #RAT #Vulnerability #ZeroDay #bot #AlienVault
Threat Actors Exploit GeoServer Vulnerability CVE-2024-36401
A critical security flaw in the Open Geospatial Consortium (OGC) GeoServer server has been exploited by cyber-attackers to gain control of vulnerable systems, according to FortiGuard Labs.
Pulse ID: 66e0b0caffa8120f0871c74b
Pulse Link: https://otx.alienvault.com/pulse/66e0b0caffa8120f0871c74b
Pulse Author: AlienVault
Created: 2024-09-10 20:49:13
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #FortiGuard #FortiGuardLabs #InfoSec #OTX #OpenThreatExchange #Vulnerability #bot #AlienVault
Deep Analysis of Snake Keylogger’s New Variant
FortiGuard Labs recently caught a phishing campaign delivering a new variant of Snake Keylogger, a keylogger malware that can steal sensitive data like saved credentials, keystrokes, and screenshots. The analysis examines the phishing email, malicious Excel document, and techniques used by the malware to evade detection and establish persistence on infected systems. It also describes how the malware collects and exfiltrates stolen data.
Pulse ID: 66d17d529bf0168ef8ffecc1
Pulse Link: https://otx.alienvault.com/pulse/66d17d529bf0168ef8ffecc1
Pulse Author: AlienVault
Created: 2024-08-30 08:05:38
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #Email #Excel #FortiGuard #FortiGuardLabs #InfoSec #KeyLogger #Malware #OTX #OpenThreatExchange #Phishing #RAT #bot #AlienVault
A Deep Dive into a New ValleyRAT Campaign Targeting Chinese Speakers
FortiGuard Labs recently encountered an ongoing malware campaign specifically targeting Chinese speakers. The attack utilizes a multi-stage malware named ValleyRAT, which employs diverse techniques to monitor and control victims while deploying arbitrary plugins. A notable characteristic is its heavy usage of shellcode to execute components directly in memory, reducing its file footprint. The campaign involves masquerading legitimate applications, sandbox evasion, privilege escalation, and downloading additional components from the Command and Control server. The malware ultimately aims to monitor user activities and deliver malicious plugins.
Pulse ID: 66bf6179623a654bee78aa5f
Pulse Link: https://otx.alienvault.com/pulse/66bf6179623a654bee78aa5f
Pulse Author: AlienVault
Created: 2024-08-16 14:26:01
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#Chinese #CyberSecurity #FortiGuard #FortiGuardLabs #InfoSec #Malware #OTX #OpenThreatExchange #RAT #ShellCode #bot #AlienVault
New Banking Trojan Targets Brazil
FortiGuard Labs recently uncovered a threat actor employing a malicious PDF file to propagate the banking Trojan CHAVECLOAK in Brazil. This intricate attack involves the PDF downloading a ZIP file and subsequently utilizing DLL side-loading techniques to execute the final malware. CHAVECLOAK is specifically designed to target users in Brazil, aiming to steal sensitive information linked to financial activities. It employs Portuguese language settings, indicating a strategic approach to the region, and actively monitors victims' interactions with financial portals. CHAVECLOAK exemplifies the sophistication of contemporary banking trojans, necessitating continual vigilance and proactive cybersecurity measures to safeguard against evolving threats within the financial landscape of South America.
Pulse ID: 65eb4a6e81789f86b903f4b7
Pulse Link: https://otx.alienvault.com/pulse/65eb4a6e81789f86b903f4b7
Pulse Author: AlienVault
Created: 2024-03-08 17:27:10
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #SouthAmerica #RAT #Brazil #Bank #Trojan #PDF #ZIP #FortiGuard #FortiguardLabs #BankingTrojan #AlienVault
TicTacToe Dropper |
A group of malware droppers used to deliver final-stage payloads have been identified by FortiGuard Labs and are expected to launch their final payload in 2023, according to the security firm.
Pulse ID: 65cd1d6ca80a1663fde09bf5
Pulse Link: https://otx.alienvault.com/pulse/65cd1d6ca80a1663fde09bf5
Pulse Author: cryptocti
Created: 2024-02-14 20:07:08
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #FortiGuard #FortiguardLabs #cryptocti
Info Stealing Packages Hidden in PyPI
FortiGuard Labs has identified new variants of Whitesnake PE malware that target Windows users and institutions, and suggests they may also be carrying out a similar attack on the Python Package Index (PyPI).
Pulse ID: 65b917a105b103306716687c
Pulse Link: https://otx.alienvault.com/pulse/65b917a105b103306716687c
Pulse Author: AlienVault
Created: 2024-01-30 15:37:04
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #Windows #Python #FortiGuard #FortiguardLabs #PyPI #AlienVault
Another Phobos Ransomware Variant Launches Attack
A new variant of the Phobos ransomware has been launched by attackers using the Gitea service to store files encoded in Base64, according to FortiGuard Labs.
Pulse ID: 65b7c76ba7071930682cd9ec
Pulse Link: https://otx.alienvault.com/pulse/65b7c76ba7071930682cd9ec
Pulse Author: AlienVault
Created: 2024-01-29 15:42:34
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #RansomWare #FortiGuard #FortiguardLabs #Phobos #AlienVault
Bandook - A Persistent Threat That Keeps Evolving
Bandook is a persistent malware that has been used in a series of attacks on Microsoft and other systems since 2007, according to FortiGuard Labs, which has identified a new variant of the malware.
Pulse ID: 658c37500d4737e0ef37ec5c
Pulse Link: https://otx.alienvault.com/pulse/658c37500d4737e0ef37ec5c
Pulse Author: AlienVault
Created: 2023-12-27 14:40:16
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #Microsoft #FortiGuard #FortiguardLabs #AlienVault
MrAnon Stealer Spreads via Email with Fake Hotel Booking PDF.
FortiGuard Labs uncovers a sophisticated phishing campaign deploying MrAnon Stealer via fake booking PDF. The threat actor sends phishing emails with fake room booking details, aiming at specific regions. The malware uses PowerGUI and cx-Freeze tools to create a complex process that involves .NET executable files and PowerShell scripts. The attacker also uses tricks like false error messages to hide successful infections. The malware downloads and extracts files from a specific domain to run a harmful Python script.
Pulse ID: 657882055fb217d3766c1f56
Pulse Link: https://otx.alienvault.com/pulse/657882055fb217d3766c1f56
Pulse Author: AlienVault
Created: 2023-12-12 15:53:41
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #Phishing #PDF #.NET #Python #FortiGuard #FortiguardLabs #PowerShell #Email #AlienVault
GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ
An ongoing exploitation of a critical Apache ActiveMQ vulnerability has led to the emergence of two new strains of malware, including GoTitan and Ddostf, according to Fortiguard Labs.
Pulse ID: 6567c0e6d66026b734340b59
Pulse Link: https://otx.alienvault.com/pulse/6567c0e6d66026b734340b59
Pulse Author: AlienVault
Created: 2023-11-29 22:53:26
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #Malware #Apache #Vulnerability #ActiveMQ #botnet #DDoS #FortiGuard #FortiguardLabs #AlienVault
"One Big Head ransomware variant displays a fake Windows Update, potentially indicating that the ransomware was also distributed as a fake Windows Update," Fortinet researchers said at the time. "One of the variants has a Microsoft Word icon and was likely distributed as counterfeit software."
#ransomware #cybersecurity #fortiguardlabs #Microsoft #Windows
https://thehackernews.com/2023/07/beware-of-big-head-ransomware-spreading.html?m=1