Threats & Attacks
Ransomware, malware, phishing and the actors behind them.
ClickFix Malware Campaign: New Analysis Reveals Lorem Ipsum Delivery Technique Linked to Vice Society Ransomware Group
New security research uncovers a sophisticated malware delivery campaign using Lorem Ipsum placeholders as the initial infection vector, with strong indicators linking the operation to the Vice Society ransomware and extortion group.
Rokarolla Android Trojan Levels Up to Full Device Control
The malware, spread via fake TikTok and Chrome downloads, demonstrates an evolution by combining banking fraud with surveillance and remote control capabilities.
Android Malware Campaign: Fake Banking Updates Distribute NFCShare on GitHub
A coordinated campaign distributes the NFCShare Android malware via fake banking app updates on GitHub, targeting European financial institution customers to harvest payment card information through NFC data extraction.
Chinese Espionage Group UNC5221 Deploys Brickstorm Backdoor to Maintain Persistent Access to Microsoft 365 Environments
Analysis of UNC5221's Brickstorm backdoor campaign targeting Microsoft 365 environments, including technical details, attribution to Chinese APT groups (APT31, APT41), and defensive recommendations for enterprise security teams. Also covers related incidents including the Fortinet credential harvesting campaign affecting 30K devices.
The Hunt for Protections Against the Next Generation of Adaptive AI Worm Malware
As cybersecurity experts brace for the emergence of adaptive agentic AI worm malware, industry leaders are racing to develop defenses capable of detecting and mitigating these intelligent threats before they can cause widespread damage on the scale of NotPetya or Stuxnet.
C0XMO Botnet Spreads via DD-WRT Router Flaw, Kills Rival Malware
A new variant of the Gafgyt botnet called C0XMO targets DD-WRT router firmware and can move to other device types with various CPU architectures. Fortinet researchers discovered the botnet's modular design and sophisticated capabilities including 19 DDoS methods, lateral movement via brute-force attacks, and anti-competitor mechanisms that kill rival malware.