In this blogpost, we provide a technical analysis of CloudScout, a post-compromise toolset used by Evasive Panda to target a government entity and a religious organization in Taiwan from 2022 to 2023. The CloudScout toolset is capable of retrieving data from various cloud services by leveraging stolen web session cookies.
A newly identified CloudSorcerer APT group has been exploiting popular cloud services and GitHub for command-and-control (C2) servers, leveraging the vast data and intellectual property stored on these platforms. According to cybersecurity analysts at Kaspersky Lab, the CloudSorcerer group has been active since May 2024, primarily targeting Russian government institutions.
Digital music distribution services are how artists reach listeners in 2024. These services enable the release of singles and albums on streaming platforms like Spotify and Apple Music—and allow artists to earn money from streams. However, selecting a music distributor is more complex than you may think. These services represent
Are you looking for the best and cheapest VoIP phone services? VoIP (Voice over Internet Protocol) phone services are helpful for team and customer communication. Sometimes, these services add an extra cost to your budget, and looking for a cheaper option is the way to go. However, when considering a
May 30, 2023Ravie Lakshmanan Cybersecurity researchers are warning about CAPTCHA-breaking services that are being offered for sale to bypass systems designed to distinguish legitimate users from bot traffic. “Because cybercriminals are keen on breaking CAPTCHAs accurately, several services that are primarily geared toward this market demand have been created,” Trend
May 10, 2023Ravie LakshmananPrivacy / Safety / Security Google unveiled a slew of new privacy, safety, and security features today at its annual developer conference, Google I/O. The tech giant’s latest initiatives are aimed at protecting its users from cyber threats, including phishing attacks and malicious websites, while providing more
May 09, 2023Ravie LakshmananCyber Crime / DDoS Attack U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors. The takedown is part of an ongoing international initiative dubbed Operation PowerOFF that’s aimed at dismantling criminal DDoS-for-hire infrastructures worldwide. The development comes almost
Apr 20, 2023Ravie LakshmananCyber Attack / Malware Telecommunication services providers in Africa are the target of a new campaign orchestrated by a China-linked threat actor at least since November 2022. The intrusions have been pinned on a hacking crew tracked by Symantec as Daggerfly, and which is also monitored by
Mar 30, 2023Ravie LakshmananCloud Security / Cyber Threat A new “comprehensive toolset” called AlienFox is being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from popular cloud service providers. “The spread of AlienFox represents an unreported trend towards attacking more minimal
As a small business owner, you’re constantly juggling finances, operations, and technology. But did you know that utilizing managed IT services could be the answer you’ve been searching for? According to a report by MarketWatch, the managed services market size is expected to reach USD 416.62 billion by 2028. That’s