Recent cyberespionage campaigns. New infection vectors for Mirai. A Cozy Bear sighting. Anonymous Sudan (from Russia).

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server.
“The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware code to run solely in memory and avoid disk-based detection mechanisms,” Trend Micro researchers Ahmed Read More 

Buying and selling second-hand devices

How to erase the personal data from your phone, tablets, and other devices (and why it’s important when you’re buying and selling them). Read More 

DarkGate and Pikabot malware emerge as Qakbot’s successors

A sophisticated phishing campaign pushing the DarkGate malware infections has recently added the PikaBot malware into the mix, making it the most advanced phishing campaign since the Qakbot operation was dismantled. […]   Read More 

BleepingComputer