South Archives - Ady DeeJay

Advanced Linux Malware Targeting South Korean Systems

August 5, 2023

by Ady DeeJay

Comments (0)

Aug 05, 2023THNLinux / Malware Threat actors are using an open-source rootkit called Reptile to target Linux systems in South Korea. “Unlike other rootkit malware that typically only provide concealment capabilities, Reptile goes a step further by offering a reverse shell, allowing threat actors to easily take control of systems,”

May 23, 2023

by Ady DeeJay

Comments (0)

May 23, 2023Ravie LakshmananCyber Threat / APT Government and diplomatic entities in the Middle East and South Asia are the target of a new advanced persistent threat actor named GoldenJackal. Russian cybersecurity firm Kaspersky, which has been keeping tabs on the group’s activities since mid-2020, characterized the adversary as both

May 15, 2023

by Ady DeeJay

Comments (0)

May 15, 2023Ravie LakshmananEndpoint Security / Ransomware A new ransomware group known as RA Group has become the latest threat actor to leverage the leaked Babuk ransomware source code to spawn its own locker variant. The cybercriminal gang, which is said to have been operating since at least April 22,

May 4, 2023

by Ady DeeJay

Comments (0)

Three different threat actors leveraged hundreds of elaborate fictitious personas on Facebook and Instagram to target individuals located in South Asia as part of disparate attacks. “Each of these APTs relied heavily on social engineering to trick people into clicking on malicious links, downloading malware or sharing personal information across

April 28, 2023

by Ady DeeJay

Comments (0)

Apr 28, 2023Ravie LakshmananMalware / Cyber Threat South Korean education, construction, diplomatic, and political institutions are at the receiving end of new attacks perpetrated by a China-aligned threat actor known as the Tonto Team. “Recent cases have revealed that the group is using a file related to anti-malware products to

March 23, 2023

by Ady DeeJay

Comments (0)

Mar 23, 2023Ravie LakshmananCyber Attack / Browser Security German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users’ Gmail inboxes. The joint advisory comes from Germany’s domestic intelligence apparatus, the Federal Office for the

March 17, 2023

by Ady DeeJay

Comments (0)

Mar 17, 2023Ravie LakshmananMobile Security / Scam Alert An Android voice phishing (aka vishing) malware campaign known as FakeCalls has reared its head once again to target South Korean users under the guise of over 20 popular financial apps. “FakeCalls malware possesses the functionality of a Swiss army knife, able

March 8, 2023

by Ady DeeJay

Comments (0)

Mar 08, 2023Ravie LakshmananZero-Day / BYOVD Attack The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable

Advanced Linux Malware Targeting South Korean Systems

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

German and South Korean Agencies Warn of Kimsuky’s Expanding Cyber Attack Tactics

FakeCalls Vishing Malware Targets South Korean Users via Popular Financial Apps

Recent Posts

Recent Comments

Categories

Archives

Recent Posts

Recent Comments

Categories

Archives

Tags