New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices

CISA and NCSC warn that FIRESTARTER, a Linux-based backdoor, targets Cisco Firepower devices, evades patches, and enables persistent access even after firmware updates.

·

backdoor, Cisco, Cyber Attack, Firestarter, Firewall, Linux, Malware, Security, VPN

¶¶¶¶¶

Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor

Acronis reveals Mustang Panda is using a new LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works.

·

Acronis, backdoor, China, Cyber Attack, Cyber-Attacks, cybersecurity, India, LOTUSLITE, Malware, Mustang Panda, Security, South Korea

¶¶¶¶¶

Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses

ViperTunnel is a Python-based backdoor linked to DragonForce ransomware that targets businesses using Windows servers across the US and the UK.

·

backdoor, Cyber Attack, Cyber-Attacks, cybersecurity, InfoGuard, Malware, Security, ViperTunnel

¶¶¶¶¶

New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper

CanisterWorm spreads via npm supply chain attack, hijacks developer accounts, targets Kubernetes clusters, and deploys destructive Kamikaze wiper payload.

·

Aqua Security, backdoor, CanisterWorm, Cyber Attack, cybersecurity, Kubernetes, Malware, Security, TeamPCP

¶¶¶¶¶

China-Linked Hackers Hit Qatar with Backdoor Disguised as War News

China-linked hackers targeted Qatar using fake war news lures to spread PlugX backdoor malware and spy on military and energy sectors.

·

backdoor, Camaro Dragon, China, Cyber Attack, Cyber-Attacks, cybersecurity, Cyberwar, Iran, Israel, Malware, Phishing, PlugX, Qatar, Security

¶¶¶¶¶

Fake CleanMyMac Site Uses ClickFix Trick to Install SHub Stealer on macOS

Researchers warn of a fake CleanMyMac site using a ClickFix attack to install SHub Stealer on macOS and steal passwords and crypto wallets.

·

backdoor, CleanMyMac, ClickFix, Crypto, cybersecurity, Infostealer, macOS, Malware, Scams and Fraud, Security, SHub Stealer

¶¶¶¶¶

Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware

A new phishing campaign is using stolen certificates from TrustConnect Software PTY LTD to sign malware. By impersonating updates for Zoom and Microsoft Teams, hackers install RMM tools to gain persistent, privileged access to networks

·

Adobe Reade, backdoor, Cyber Attack, cybersecurity, Malware, Microsoft, Microsoft Teams, Phishing, Privacy, Security, vulnerability, Zoom

¶¶¶¶¶

TAMECAT PowerShell Backdoor Targets Edge and Chrome: Login Credentials At Risk

TAMECAT is a sophisticated PowerShell-based backdoor linked to APT42, an Iranian state-sponsored hacking group. It steals login credentials from Microsoft Edge and Chrome browsers while evading detection. Security researchers from Israel’s Nation…

·

backdoor, Cyber Security News, Malware

¶¶¶¶¶

Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

The Google Threat Intelligence Group (GTIG) warns that nation-state actors and financially motivated threat actors are exploiting a…

·

backdoor, Carpathian, cybersecurity, Google, GTIG, Malware, Poison Ivy, RomCom, Russia, Security, Stockstay, vulnerability, WinRAR

¶¶¶¶¶

ClickFix to CrashFix: KongTuke Used Fake Chrome Ad Blocker to Install ModeloRAT

Huntress discovers ‘CrashFix,’ a new attack by KongTuke hacker group using fake ad blockers to crash browsers and trick office workers into installing ModeloRAT malware.

·

Adblocker, backdoor, ClickFix, CrashFix, Cyber Attack, cybersecurity, DoS, Huntress, KongTuke, Malware, ModeloRAT, NexShield, Security

¶¶¶¶¶

1010.cx

1010.cx

Category: backdoor

New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices

Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor

Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses

New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper

China-Linked Hackers Hit Qatar with Backdoor Disguised as War News

Fake CleanMyMac Site Uses ClickFix Trick to Install SHub Stealer on macOS

Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware

TAMECAT PowerShell Backdoor Targets Edge and Chrome: Login Credentials At Risk

Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

ClickFix to CrashFix: KongTuke Used Fake Chrome Ad Blocker to Install ModeloRAT