2024-04-25 16:19
Key Takeaways
A new Android Banking Trojan, "Brokewell", was identified as distributing via a fake Chrome Update phishing site.
The malware's development is attributed to the dev… Read More
Blog Directory > Technology Blogs > Cybersecurity Research technology Blog >
Cybersecurity Research Blog
cyble.com/blog
Blogarama's Sponsor
Tags:
figure
malware
xehook stealer evolution
addresses observed attempting
drainer
android banking trojan
stealer evolution
observed attempting
fake eshop campaign
aiohttp vulnerability
To explore the latest trends and insights in cybersecurity, visit the Cyble Research and Intelligence Labs (CRIL) Blog. Stay updated with expert analysis and recommendations on protecting against evolving cyber threats. Join the Cyble community now for timely updates and in-depth cybersecurity research findings.
2024-04-24 11:32
Key Takeaways
Cyble Research & Intelligence Labs (CRIL) identified a DragonForce ransomware binary based on LOCKBIT Black ransomware, suggesting the threat actors behind DragonForce… Read More
2024-04-19 04:33
TransparentTribe primarily targets Indian government organizations, military personnel, and defense contractors. Its objective is usually to gather sensitive information, conduct cyber esp… Read More
2024-04-11 11:31
Cyble Global Sensor Intelligence observed active exploitation of critical D-Link Vulnerability
Recently, the security community has raised concerns regarding the vulnerabilities fo… Read More
2024-04-11 09:39
Key Takeaways
Cyble Research and Intelligence Labs (CRIL) has uncovered a novel phishing campaign tailored to cryptocurrency users.
This campaign was deploying a well-known FatalRAT al… Read More
2024-04-03 07:03
Key Takeaways
Once again, a fake e-shop campaign has been detected, this time targeting 18 Malaysian banks with upgraded malicious applications.
The campaign has progressed from… Read More
2024-03-28 11:24
Key Takeaways
Threat actors (TAs) are actively exploiting platforms like Google Ads and social media platforms such as X (formerly Twitter) to disseminate crypto drainers, employing tact… Read More
2024-03-27 17:04
Key Takeaways
In February, the FBI took down the WarzoneRAT malware operation, seizing its infrastructure and arrested two individuals linked to the cybercrime operation.
Recentl… Read More
2024-03-15 05:44
CGSI captures potential exploitation of an Aiohttp vulnerability by the ShadowSyndicate Group.
The post CGSI Probes: ShadowSyndicate Group’s Possible Exploitation of Aiohttp Vulnerabil… Read More
2024-03-12 16:01
CRIL analyzes Xehook stealer and it's evolution from Cinoshi project.
The post Xehook Stealer: Evolution of Cinoshi’s Project Targeting Over 100 Cryptocurrencies and 2FA Extensions app… Read More
2024-03-07 14:32
Cyble analyzes the Pig-butchering scam targeting Indian investors by distributing fake trading apps via Google Play Store and App Store.
The post The Spreading Wave of Pig-Butchering Scams i… Read More
2024-03-07 10:18
Cyble Global Sensor Intelligence observes active exploitation of JetBrains TeamCity Authentication Bypass vulnerability.
The post JetBrains TeamCity Authentication Bypass vulnerability under… Read More
2024-03-06 15:47
CRIL analyzes a malware campaign targeting Russians, utilizing a fake Russian government website to distribute SapphireStealer.
The post SapphireStealer Sneaks In: Deceptive Legal Documents… Read More
2024-03-01 15:11
Ongoing Phishing Campaign Targets Healthcare and Cryptocurrency Users via ScreenConnect Cyble Research and Intelligence Labs (CRIL) has unearthed a sophisticated phishing campaign that speci… Read More
2024-02-26 11:10
CRIL investigates a recent phishing scheme targeting Healthcare and cryptocurrency users to deploy Connectwise ScreenConnect.
The post Ongoing Phishing Campaign Targets Healthcare and Crypto… Read More
Cyble Chronicles – February 23: Latest Findings & Recommendations For The Cybersecurity CommunityÂ
2024-02-22 15:41
The Fate of the CriminalMW Group: Endgame or a New Rebranding Journey? Recently, an enhanced version of the CriminalMW Android Banking Trojan was discovered, now available for rent at $5,000… Read More
2024-02-20 07:23
Cyble analyzes the resurgence of Observer stealer, as AsukaStealer under a Malware-as-a-Service model
The post AsukaStealer, a Revamped Version of the ObserverStealer, Advertised as Malware… Read More
2024-02-19 10:44
CRIL analyzes the Brazilian CriminalMW Group's activities and their rebranding tactics.
The post The Fate of the CriminalMW Group: Endgame or a New Rebranding Journey? appeared first o… Read More
2024-02-16 06:39
Cyble analyzes the increasing incidences of vulnerabilities in Fortinet, highlighting the impact they have on Critical Infrastructure.
The post Vulnerable Fortinet Devices: Low-hanging Frui… Read More
2024-02-14 10:21
Cyble analyzes JKwerlo, a sophisticated Go-Based ransomware variant launching targeted attacks against French and Spanish speaking Users.
The post New Go-Based JKwerlo Ransomware poses a ri… Read More
2024-02-08 13:52
Doppelganger Dilemma: New XPhase Clipper’s Proliferation via Deceptive Crypto Sites and Cloned YouTube Videos Cyble Research and Intelligence Labs (CRIL) has discovered a targeted malw… Read More
2024-02-07 11:13
Cyble analyzes a new clipper dubbed XPhase, targeting crypto users and spreading via fake sites and cloned videos
The post Doppelganger Dilemma: New XPhase Clipper’s Proliferation via… Read More
2024-02-01 12:45
Uncovering Atomic Stealer (AMOS) Strikes and the Rise of Dead Cookies Restoration Cyble Research and Intelligence Labs (CRIL) has recently uncovered a series of phishing websites masqueradin… Read More
2024-02-01 06:12
Cyble analyzes GreenBean, a new Android Banking Trojan leveraging Simple RealTime Server (SRS) for C&C Communication
The post Greenbean: Latest Android Banking Trojan Leveraging Simple R… Read More
2024-01-31 13:51
CRIL raises concerns about the rise in GhostSec's activities supporting threat actors/hacktivists and their newly launched project, which aims to raise funds to help them anonymize their ide… Read More
2024-01-30 13:51
There is no excerpt because this is a protected post.
The post Protected: Active Exploitation of Atlassian Confluence RCE Vulnerability (CVE-2023-22527) appeared first on Cyble.
The post Pro… Read More
2024-01-30 13:51
Cyble's Global Sensor Intelligence (CGSI) network picks up scanning attempts aiming to exploit a recent Vulnerability in Atlassian Confluence.
The post Active Exploitation of Atlassian Conf… Read More
2024-01-25 11:10
CRIL analyzes an ongoing phishing campaign spreading an updated version of Atomic Stealer targeting Mac users.
The post Uncovering Atomic Stealer (AMOS) Strikes and the Rise of Dead Cookies… Read More
2024-01-25 08:09
Cyble Global Sensors pick up persistent exploitation of Ivanti Connect Secure Vulnerabilities Cyble Global Sensor Intelligence (CGSI) has detected the continuous exploitation of recently rev… Read More
2024-01-22 16:22
CRIL investigates an ongoing campaign where individuals seeking asylum in the US are being targeted by MetaStealer malware.
The post Threat Actors Target US Asylum Seekers with MetaStealer… Read More
2024-01-19 15:06
Cyble Global Sensors pick up persistent exploitation of Ivanti Connect Secure Vulnerabilities Introduction Cyble Global Sensor Intelligence (CGSI) has detected the continuous exploitation of… Read More
2024-01-18 15:03
Sneaky Azorult Stealer returns in a new campaign Azorult malware, first identified in 2016, has resurfaced in a new campaign, maintaining its role as a potent information-stealing threat. Th… Read More
2024-01-17 14:57
Cyber Espionage Attack on the Indian Air Force: Go-Based Infostealer Exploits Slack for Data Theft Key Takeaways Overview CRIL has uncovered a Go Stealer possibly targeting the Indian Air Fo… Read More
Subscribe to Cybersecurity Research
Get updates delivered right to your inbox!