The all in one place for non-profit security aid.
A new Golang-based information stealer called Skuld has compromised Windows systems across Europe, Southeast Asia, and the U.S.
"This new malware strain tries to steal sensitive information from its victims," Trellix researcher Ernesto Fernández Provecho said in a Tuesday analysis. "To accomplish this task, it searches for data stored in applications such as Discord and web browsers; information Read More
The Hacker News | #1 Trusted Cybersecurity News Site
New ‘HrServ.dll’ Web Shell Detected in APT Attack Targeting Afghan Government
An unspecified government entity in Afghanistan was targeted by a previously undocumented web shell called HrServ in what’s suspected to be an advanced persistent threat (APT) attack.
The web shell, a dynamic-link library (DLL) named “hrserv.dll,” exhibits “sophisticated features such as custom encoding methods for client communication and in-memory execution,” Kaspersky security researcher Mert Read More
The Hacker News | #1 Trusted Cybersecurity News Site
Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails
Delivery- and shipping-themed email messages are being used to deliver a sophisticated malware loader known as WailingCrab.
"The malware itself is split into multiple components, including a loader, injector, downloader and backdoor, and successful requests to C2-controlled servers are often necessary to retrieve the next stage," IBM X-Force researchers Charlotte Hammond, Ole Villadsen, and Kat Read More
The Hacker News | #1 Trusted Cybersecurity News Site
Compliance can’t wait.
Igor Volovich from Qmulos sits down with Dave to discuss how compliance can’t wait for the government to find alignment on security and risk. Ben shares the story of a Federal Judge dismissing a lawsuit from the Republican National Committee against Google. Dave’s got an opinion piece from the New York Times making the case that social media platforms should provide algorithmic choice. Read More
The CyberWire