Lucian Constantin

Exploiting a catalog of 20,000 misconfigurations to infect Linux servers, the cryptomining malware has gone largely undetected through use of process masquerading but appears capable of more.

The cyberespionage group has deployed two distinct toolsets for breaching air-gapped networks, demonstrating keen awareness of segmentation used by its targets.

New phishing campaigns attempt to evade detection by constructing rogue QR codes with special ASCII characters and load phishing pages locally using the local blob URL feature in browsers.

오픈소스 개발 생태계에서 악성 소프트웨어 요소가 크게 증가했다는 분석이다. 소프트웨어 공급망 공격에 경각심을 가질 이유가 커지고 있다.

Red team tool EDRSilencer has been used by hackers to make the Windows Filtering Platform block a long list of EDR products from communicating with their management consoles and reporting malware detections.

The Latrodectus malware loader stepped in to fill the void left by the disruption of major malware distribution botnets such as IcedID. Here's how it's being used and how it operates.

Two suspects were arrested by Belgian police and servers shut down after a coordinated investigation of transnational malware first tracked in the Netherlands.

Microsoft's Digital Defense Report offers new insights into a rising trend that sees lines blurring between cyberespionage and cybercriminal activity.

The malware has added exploits for more web applications and devices to its arsenal and some of them seem to be inherited from an older botnet called Mozi.

Organizations that develop websites with Microsoft Power Pages can accidentally overprovision database privileges for authenticated or anonymous users, leading to the exposure of sensitive records, a researcher has found.