VTPRACTITIONERS{ACRONIS}: Tracking FileFix, Shadow Vector, and SideWinder
Introduction We have recently started a new blog series called #VTPRACTITIONERS. This series aims to share with the community what other practitioners are able to research using VirusTotal from a technical point of view. Our first blog saw our colleagues at SEQRITE tracking UNG0002, Silent Lynx, and DragonClone. In this new post, Acronis Threat Research […] more…Inside of the WASP’s nest: deep dive into PyPI-hosted malware
Photo by Matheus Queiroz on Unsplash In late 2022 we decided to start monitoring PyPI, arguably the most important Python repository, as there were a number of reports on it hosting malware. PyPI took exceptional relevance amongst all repositories as, historically, it was trusted by default by many software developers. Any security breach or abuse […] more…APT43: An investigation into the North Korean group’s cybercrime operations
Introduction As recently reported by our Mandiant’s colleagues, APT43 is a threat actor believed to be associated with North Korea. APT43’s main targets include governmental institutions, research groups, think tanks, business services, and the manufacturing sector, with most victims located in the United States and South Korea. The group uses a variety of techniques and […] more…More information
- Facebook launches $10m deepfake detection project
- 6 UK teenagers arrested for allegedly using Lizard Squad’s Lizard Stresser DDoS service
- McAfee Raises the Stakes Against Cyberespionage
- Google, CISA Warn of Android Flaw After Reports of Chinese App Zero-Day Exploitation
- How to turn any website into a custom Android widget
- Botnets Can Exploit More Vulnerabilities in DVRs
- Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned
- Zero-day attacks are meaner, more rampant than we ever thought
- Schneider Electric Patches 16 Flaws in Building Automation Software
- "Exploit This": Evaluating the exploit skills of malware groups