A new-python based ransomware group, "Memento Team", takes a unique approach to ...

Utah Imaging Associates notified 582,170 affected individuals of a security brea...

Threat groups disable pre-installed security features in Alibaba CSP to illegall...

WinRAR

Python

XMRig

Memento Team relocate files to WinRAR to circumvent endpoint protection

A new-python based ransomware group, "Memento Team", takes a unique approach to ransomware operations by moving files to password-protected archives instead of encrypting them... ...

19-Nov-2021

3 min read

Utah

Healthcare

IDX

Data Breach incident at Utah Imaging Associates impacts 582K patients

Utah Imaging Associates notified 582,170 affected individuals of a security breach incident that exposed sensitive data about former and current patients... ...

19-Nov-2021

2 min read

ECS

Cryptojacking

Monero

Alibaba CSP becomes a viable target for illicitly running Monero mining

Threat groups disable pre-installed security features in Alibaba CSP to illegally cryptomining Monero...

19-Nov-2021

3 min read

Domain Fronting

Myanmar

Cobalt Strike

Myanmar government domain was abused through Cobalt Strike to conceal the suspic...

Domain Fronting technique was leveraged in a new cyberattack campaign to conceal its network traffic and deploys a leaked version of Cobalt Strike for post-exploitation activities... ...

18-Nov-2021

4 min read

Espionage

Russia

Phishing

RedCurl APT group reappears with an updated arsenal in attacks

Russian-speaking APT RedCurl has commenced its operations following its public exposure in 2020; they have breached four companies since the beginning of the year... ...

18-Nov-2021

3 min read

AWS

PDPC

Singapore

RedDoorz incurred a fine of $54,456 by PDPC of Singapore following a data breach...

Singapore's PDPC issues a financial penalty of SGD 74,000 on Commeasure after failing to implement security protocols that lead to its largest data breach incident... ...

17-Nov-2021

3 min read

Trickbot

Emotet

Botnet

Emotet reincarnated through Trickbot's infrastructure

Emotet botnet has returned and is rebuilding its infrastructure though Trickbot after ten months when law enforcement shut down their C&C servers... ...

17-Nov-2021

4 min read