Variant Archives - Ady DeeJay

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

October 24, 2024

Oct 24, 2024Ravie LakshmananRansomware / Cybercrime Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by cybersecurity firm Halcyon under the moniker Qilin.B. “Notably, Qilin.B now supports AES-256-CTR encryption for systems with AESNI capabilities,

November 18, 2023

by Ady DeeJay

Comments (0)

The threat actors behind the 8Base ransomware are leveraging a variant of the Phobos ransomware to conduct their financially motivated attacks. The findings come from Cisco Talos, which has recorded an increase in activity carried out by cybercriminals. “Most of the group’s Phobos variants are distributed by SmokeLoader, a backdoor

September 22, 2023

by Ady DeeJay

Comments (0)

Sep 22, 2023THNMalware / Cyber Threat An active malware campaign targeting Latin America is dispensing a new variant of a banking trojan called BBTok, particularly users in Brazil and Mexico. “The BBTok banker has a dedicated functionality that replicates the interfaces of more than 40 Mexican and Brazilian banks, and

July 1, 2023

by Ady DeeJay

Comments (0)

Jul 01, 2023Ravie LakshmananEndpoint Security / Malware Researchers have pulled back the curtain on an updated version of an Apple macOS malware called RustBucket that comes with improved capabilities to establish persistence and avoid detection by security software. “This variant of RustBucket, a malware family that targets macOS systems, adds

June 1, 2023

by Ady DeeJay

Comments (0)

Jun 01, 2023Ravie LakshmananNetwork Security / Exploit The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw in Zyxel gear to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2023-28771 (CVSS score: 9.8), the issue relates to a command

May 16, 2023

by Ady DeeJay

Comments (0)

May 16, 2023Ravie LakshmananEndpoint Security / Cyber Threat A Golang implementation of Cobalt Strike called Geacon is likely to garner the attention of threat actors looking to target Apple macOS systems. The findings come from SentinelOne, which observed an uptick in the number of Geacon payloads appearing on VirusTotal in

May 12, 2023

by Ady DeeJay

Comments (0)

May 12, 2023Ravie LakshmananLinux / Malware A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week. “BPFDoor retains its reputation as an extremely stealthy and difficult-to-detect malware with this

April 26, 2023

by Ady DeeJay

Comments (0)

Apr 26, 2023Ravie LakshmananLinux / Cyber Threat The Chinese nation-state group dubbed Alloy Taurus is using a Linux variant of a backdoor called PingPull as well as a new undocumented tool codenamed Sword2033. That’s according to findings from Palo Alto Networks Unit 42, which discovered recent malicious cyber activity carried

March 10, 2023

by Ady DeeJay

Comments (0)

Mar 10, 2023Ravie LakshmananMobile Security / Android A new variant of the Android banking trojan named Xenomorph has surfaced in the wild, latest findings from ThreatFabric reveal. Named “Xenomorph 3rd generation” by the Hadoken Security Group, the threat actor behind the operation, the updated version comes with new features that

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks

New ‘RustBucket’ Malware Variant Targeting macOS Users

Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

Hackers Using Golang Variant of Cobalt Strike to Target Apple macOS Systems

New Stealthy Variant of Linux Backdoor BPFDoor Emerges from the Shadows

Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks

Xenomorph Android Banking Trojan Returns with a New and More Powerful Variant

Recent Posts

Recent Comments

Categories

Archives

Recent Posts

Recent Comments

Categories

Archives

Tags