Cyberattackers Hide Infostealers in YouTube Comments

Threat actors are targeting people searching for pirated or cracked software with fake downloaders that include infostealing malware such as Lumma and Vidar.

The impossibility of “getting ahead” in cyber defense - Help Net Security

"Getting ahead" of cyber attackers at scale is impossible. Instead, focus on dissuasion and resilience against inevitable attacks.

Threat Actors Team Up for Post-Holiday Phishing Email Surge

Just like you and me, cyberattackers returned from winter break and immediately started sending thousands of emails.

Microsoft says Russia responsible for hack of email accounts

Microsoft said Monday it uncovered evidence that Russia's government is responsible for hacks of its customers' email accounts and it worked with the Polish government to repel the cyberattackers.

Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

The Kinsing threat group has launched more than 1,000 cyberattacks in less than two months, exploiting a security vulnerability in the internal corporate messaging app in order to upload the malware and a cryptominer.

TechCrunch is part of the Yahoo family of brands

InfoSecSherpa’s News Roundup for Monday, March 20, 2023

InfoSecSherpa: Your Guide Up a Mountain of Information!. “InfoSecSherpa’s News Roundup for Monday, March 20, 2023” is published by InfoSecSherpa.

This stealthy hacking campaign uses a new trick to deliver its malware

Cyber attackers are using a new technique to hide their malicious activities and compromise victims with trojan malware backdoors.

Will Manidis on Twitter

“In April, a team of cyberattackers attempted to breach an undersea cable off the coast of Hawaii. The cable is part of a network that carries over 95% of the world’s data. The attack is one of in a series of mysterious attacks on US infrastructure. Let's dig in.”

My Book Live Users Wake Up to Wiped Devices, Active RCE Attacks

“I am totally screwed,” one user wailed after finding years of data nuked. Western Digital advised yanking the NAS storage devices offline ASAP: There's an exploit.