The Rising Threat of Abyss Locker Ransomware to VMware's ESXi Servers
A new emerging threat, Abyss Locker ransomware has been making headlines for its targeted attacks on VMware's ESXi virtualised environments. IOCs however seem sadly lacking.
Tags /
#Malware Analysis
65 reports
CVE-2023-21716: A Critical Heap Corruption Vulnerability in Microsoft Word
CVE-2023-21716 ( NVD ), a critical flaw in Microsoft Office Word's RTF parser, has been a focal point in the cybersecurity community since its private disclosure to Microsoft in November 2022.…
Arctic Wolf Unveiling the Intricate Connection Between Conti and Akira Ransomware Groups
In a recent blog post by Arctic Wolf titled "Conti and Akira: Chained Together" , the authors delve into the connections between the Conti and Akira ransomware groups. The article provides a…
Unmasking Storm-0978: A Cyber Espionage Campaign
In the ever-evolving landscape of cyber threats, a new actor has emerged on the scene: Storm-0978. This group, with its financial and espionage motives, has been conducting a series of…
Threat actor profile: APT37 (ScarCruft / Reaper)
APT37, also known as Reaper, Group123, Ricochet Chollima, StarCruft, and Scarcruft, is a cyber espionage group that [..]
The Emergence of FraudGPT
The cyber threat landscape is continually evolving, with threat actors leveraging advanced technologies to carry out sophisticated attacks. One such development is the emergence of FraudGPT, a new…
The Future of APT Analysis: Navigating the Evolving Threat Landscape
The cybersecurity landscape is a complex and ever-evolving space, with Advanced Persistent Threat (APT) actors and ransomware attackers continuously developing their skills and learning from their…
Outlook Email Authentication Bypass: Display Name Obfuscation
The issue lies in the "display name" of an email's "From" header in Outlook. It appears that this display name can be manipulated to misrepresent the actual sender of the email, making phishing…
Active Exploitation of Zero-Day Vulnerability (CVE-2023-38606) Affecting All Apple Products
The Centre for Cyber Security Belgium (CERT.be) has issued an advisory warning of an actively exploited zero-day vulnerability (CVE-2023-38606) affecting all Apple products. This vulnerability,…
OSS Supply Chain Attacks Targeting the Banking Sector: A Detailed Analysis
In a significant development in the cybersecurity landscape, the banking sector has recently been the target of two distinct open-source software (OSS) supply chain attacks. These attacks,…
Nokia 2023 Threat Intelligence Report
In the recently released "Threat Intelligence Report 2023" by Nokia, the company provides an in-depth analysis of the current cybersecurity landscape, particularly focusing on telecom networks and…
Analysis of Evasive Panda APT Group's Recent Activities
The Evasive Panda Advanced Persistent Threat (APT) group, also known as BRONZE HIGHLAND and Daggerfly, has been active since at least 2012. This Chinese-speaking APT group has been conducting…