UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign

UNC6783 hackers and extortionists impersonate support staff, using fake Okta login pages and social engineering to access corporate systems and steal sensitive data.

·

Austin Larsen, BPO, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Extortion, Google, Okta, SCAM, Scams and Fraud, Security, UNC6783

¶¶¶¶¶

Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure

Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Medusa, Microsoft, Ransomware, Security, Storm-1175, vulnerability

¶¶¶¶¶

North Korean Hackers Pose as Trading Firm to Steal $285M from Drift

North Korean hackers (UNC4736) posed as a trading firm for six months to infiltrate Drift Protocol, using social engineering tactics to steal $285M without suspicion.

·

Blockchain, Crypto, Cyber-Attacks, Drift, Drift Protocol, Fraud, North Korea, SCAM, Scams and Fraud, Security, UNC4736

¶¶¶¶¶

UNC1069 Targets Node.js Maintainers via Fake LinkedIn, Slack Profiles

North Korean group UNC1069 targets Node.js maintainers using fake LinkedIn and Slack profiles to spread malware and compromise open source packages.

·

Cyber Attack, Cyber-Attacks, cybersecurity, LinkedIn, Microsoft Teams, Node.js, North Korea, Security, Slack, UNC1069, Zoom

¶¶¶¶¶

North Korean Hackers Abuse GitHub to Spy on South Korean Firms

Researchers from FortiGuard Labs have uncovered a high-severity spying campaign targeting South Korean companies. Discover how North Korean…

·

Cyber Attack, Cyber-Attacks, cybersecurity, FortiGuard, GitHub, Lazarus, North Korea, PowerShell, Security, South Korea, Windows

¶¶¶¶¶

Yurei Ransomware Uses Common Tools, Adds Stranger Things References

Team Cymru details the Yurei ransomware campaign, using standard tools and a few Stranger Things–named payloads to breach and encrypt systems.

·

Cyber Crime, Cyber-Attacks, cybersecurity, Malware, Ransomware, Security, Stranger Things, Team Cymru, Toolkit, Yurei

¶¶¶¶¶

Ransomware Groups Exploit Legit IT Tools to Bypass Antivirus

New research from Seqrite explains the ‘dual-use dilemma,’ where ransomware attackers repurpose legitimate IT tools like IOBit Unlocker…

·

Antivirus, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, IOBit Unlocker, Malware, Process Hacker, Quick Heal, Ransomware, Security

¶¶¶¶¶

TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

Telnyx issues an urgent alert after hackers TeamPCP uploaded malicious versions (4.87.1 & 4.87.2) of its Python SDK to steal cloud and crypto credentials.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Security, Supply Chain, TeamPCP, Telnyx, Trivy

¶¶¶¶¶

Mirai Malware Evolves into Hundreds of Variants Driving Botnet Growth

Mirai malware evolves into hundreds of variants, driving botnet growth, including Aisuru and KimWolf, powering large-scale attacks, and increasing risks to vulnerable IoT devices worldwide.

·

Botnet, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, DDOS, IoT, Kimwolf, Malware, Mirai, Security

¶¶¶¶¶

TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign

Hackers compromised Trivy, Checkmarx, and LiteLLM in a supply chain attack, stealing cloud credentials, tokens, and crypto wallet data from developers.

·

Checkmarx, Cyber Attack, Cyber-Attacks, cybersecurity, LAPSUS$, Malware, Security, Supply Chain, TeamPCP, Trivy

¶¶¶¶¶

1010.cx

1010.cx

Category: Cyber-Attacks

UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign

Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure

North Korean Hackers Pose as Trading Firm to Steal $285M from Drift

UNC1069 Targets Node.js Maintainers via Fake LinkedIn, Slack Profiles

North Korean Hackers Abuse GitHub to Spy on South Korean Firms

Yurei Ransomware Uses Common Tools, Adds Stranger Things References

Ransomware Groups Exploit Legit IT Tools to Bypass Antivirus

TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

Mirai Malware Evolves into Hundreds of Variants Driving Botnet Growth

TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign