brangberg – Page 1383

New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication

Cybersecurity researchers have discovered a previously undocumented Windows backdoor that leverages a built-in feature called Background Intelligent Transfer Service (BITS) as a command-and-control (C2) mechanism.
The newly identified malware strain has been codenamed BITSLOTH by Elastic Security Labs, which made the discovery on June 25, 2024, in connection with a cyber attack targeting an

Cloudflare Tunnels Abused for Malware Delivery

Threat actors are abusing Cloudflare’s TryCloudflare feature to create one-time tunnels for the distribution of remote access trojans.

The post Cloudflare Tunnels Abused for Malware Delivery appeared first on SecurityWeek.

CISA Warns of Avtech Camera Vulnerability Exploited in Wild

An Avtech camera vulnerability that likely remains unfixed has been exploited in the wild, according to CISA.

The post CISA Warns of Avtech Camera Vulnerability Exploited in Wild appeared first on SecurityWeek.

Over 35k Domains Hijacked in ‘Sitting Ducks’ Attacks

Threat actors have hijacked over 35,000 domains in five years because DNS providers fail to properly verify domain ownership.

The post Over 35k Domains Hijacked in ‘Sitting Ducks’ Attacks appeared first on SecurityWeek.

Cybersecurity M&A Roundup: 25 Deals Announced in July 2024

Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in July 2024.

The post Cybersecurity M&A Roundup: 25 Deals Announced in July 2024 appeared first on SecurityWeek.

U.S. Releases High-Profile Russian Hackers in Diplomatic Prisoner Exchange

In a historic prisoner exchange between Belarus, Germany, Norway, Russia, Slovenia, and the U.S., two Russian nationals serving time for cybercrime activities have been freed and repatriated to their country.
This includes Roman Valerevich Seleznev and Vladislav Klyushin, who are part of a group of eight people who have been swapped back to Russia in exchange for the release of 16 people who

Cybercriminals Abusing Cloudflare Tunnels to Evade Detection and Spread Malware

Cybersecurity companies are warning about an uptick in the abuse of Clouflare’s TryCloudflare free service for malware delivery.
The activity, documented by both eSentire and Proofpoint, entails the use of TryCloudflare to create a one-time tunnel that acts as a conduit to relay traffic from an attacker-controlled server to a local machine through Cloudflare’s infrastructure.
Attack chains

Author: brangberg