October 2024 – Page 8

Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services

A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a previously undocumented post-compromise toolset codenamed CloudScout.
“The CloudScout toolset is capable of retrieving data from various cloud services by leveraging stolen web session cookies,” ESET security researcher Anh Ho said. “Through

US says Chinese hackers breached multiple telecom providers

The FBI and the U.S. Cybersecurity & Infrastructure Security Agency (CISA) have disclosed that Chinese hackers breached commercial telecommunication service providers in the United States. […]

Google Invests in Alternative Neutral Atom Quantum Technology

Google invested in QuEra Computing, which is developing a very different and potentially rival quantum computer technology.

The post Google Invests in Alternative Neutral Atom Quantum Technology appeared first on SecurityWeek.

Google: Russia Targeting Ukrainian Military Recruits With Android, Windows Malware

Google has uncovered a Russian cyberespionage and influence campaign targeting Ukrainian military recruits.

The post Google: Russia Targeting Ukrainian Military Recruits With Android, Windows Malware appeared first on SecurityWeek.

Socure Acquires Risk Decisioning Company Effectiv for $136M

Predictive analytics firm Socure will spend $136 million to acquire Effectiv, a provider of fraud and risk decisioning technologies.

The post Socure Acquires Risk Decisioning Company Effectiv for $136M appeared first on SecurityWeek.

Russian Espionage Group Targets Ukrainian Military with Malware via Telegram

A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian military under the Telegram persona Civil Defense.
Google’s Threat Analysis Group (TAG) and Mandiant are tracking the activity under the name UNC5812. The threat group, which operates a Telegram channel named civildefense_com_ua, was created on

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

Three malicious packages published to the npm registry in September 2024 have been found to contain a known malware called BeaverTail, a JavaScript downloader and information stealer linked to an ongoing North Korean campaign tracked as Contagious Interview.
The Datadog Security Research team is monitoring the activity under the name Tenacious Pungsan, which is also known by the monikers

Month: October 2024