Latest news

Trojanized KeePass campaign: novel loader and credential theft in ransomware operations
Malware

Trojanized KeePass campaign: novel loader and credential theft in ransomware operations

14 May 2025 securebulletin.com

A recent investigation by WithSecure’s Threat Intelligence team has uncovered a sophisticated malware campaign leveraging a trojanized version of the...
Read more 0
China-Linked APTs exploit critical SAP NetWeaver vulnerability to breach over 580 systems globally
Cybercrime

China-Linked APTs exploit critical SAP NetWeaver vulnerability to breach over 580 systems globally

13 May 2025 securebulletin.com

In a significant escalation of cyber-espionage activities, multiple China-affiliated advanced persistent threat (APT) groups have been found actively exploiting a...
Read more 0
JPEG image FUD ransomware: a way to evades antivirus solutions
Ransomware

JPEG image FUD ransomware: a way to evades antivirus solutions

13 May 2025 securebulletin.com

In a concerning development for cybersecurity professionals, threat actors have begun leveraging a novel Fully UnDetectable (FUD) ransomware attack technique...
Read more 0
New malware LOSTKEYS uncovered in COLDRIVER campaign targeting Western governments and NGOs
Spyware

New malware LOSTKEYS uncovered in COLDRIVER campaign targeting Western governments and NGOs

12 May 2025 securebulletin.com

The Google Threat Intelligence Group (GTIG) has recently uncovered a sophisticated new malware strain, dubbed LOSTKEYS, deployed by the Russian...
Read more 0
German authorities shut down major crypto-swapping platform “eXch,” seizing €34 million in illicit assets
Cybercrime

German authorities shut down major crypto-swapping platform “eXch,” seizing €34 million in illicit assets

12 May 2025 securebulletin.com

On April 30, 2025, the Frankfurt am Main General Prosecutor’s Office-Central Unit for Combating Internet Crime (ZIT)-in close collaboration with...
Read more 0
Tactical reality behind the India-Pakistan hacktivist surge
Hacktivism

Tactical reality behind the India-Pakistan hacktivist surge

12 May 2025 securebulletin.com

In May 2025, a wave of hacktivist activity targeting Indian digital infrastructure sparked widespread alarm in media and social networks,...
Read more 0
From PDF invoice to geo-fenced RAT delivery campaign
Phishing

From PDF invoice to geo-fenced RAT delivery campaign

10 May 2025 securebulletin.com

A recent campaign targeting Southern European organizations demonstrates advanced evasion techniques combining social engineering, trusted platforms, and geolocation filtering. The...
Read more 0
Emerging DOGE Big Balls ransomware campaign leverages multi-stage tooling and BYOVD exploits
Ransomware

Emerging DOGE Big Balls ransomware campaign leverages multi-stage tooling and BYOVD exploits

10 May 2025 securebulletin.com

A recent analysis of newly discovered payloads linked to the DOGE Big Balls ransomware operation reveals a complex infection chain...
Read more 0
Malicious npm packages hijack macOS Cursor AI IDE
Vulnerability

Malicious npm packages hijack macOS Cursor AI IDE

9 May 2025 securebulletin.com

The Socket Threat Research Team has uncovered a sophisticated supply chain attack targeting macOS developers using the Cursor AI code...
Read more 0
Stealthy Linux backdoor leveraging residential proxies and NHAS reverse SSH
Vulnerability

Stealthy Linux backdoor leveraging residential proxies and NHAS reverse SSH

4 May 2025 securebulletin.com

A recently discovered Linux backdoor (SHA256: ea41b2bf1064efcb6196bb79b40c5158fc339a36a3d3ddee68c822d797895b4e) employs advanced evasion techniques to bypass detection while establishing persistent access via SOCKS5...
Read more 0
US indicts Black Kingdom ransomware operator: technical analysis of ProxyLogon exploitation and law enforcement response
Ransomware

US indicts Black Kingdom ransomware operator: technical analysis of ProxyLogon exploitation and law enforcement response

3 May 2025 securebulletin.com

The U.S. Department of Justice unsealed charges against Yemeni national Rami Khaled Ahmed (36) for deploying Black Kingdom ransomware via...
Read more 0
Sophisticated npm malware campaign exploits Cross-Ecosystem typosquatting
Malware

Sophisticated npm malware campaign exploits Cross-Ecosystem typosquatting

3 May 2025 securebulletin.com

A coordinated malware operation targeting npm employs cross-ecosystem typosquatting to mimic popular libraries from Python, Java, C++, and .NET ecosystems....
Read more 0