Blog – Page 1011 – Cyber Mike

Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking

Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT.
The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China.
“This actor has increasingly targeted key roles

Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023

Ransomware attacks netted cybercrime groups a total of $813.5 million in 2024, a decline from $1.25 billion in 2023.
The total amount extorted during the first half of 2024 stood at $459.8 million, blockchain intelligence firm Chainalysis said, adding payment activity slumped after July 2024 by about 3.94%.
“The number of ransomware events increased into H2, but on-chain payments declined,

Astra, Invary Raise Millions for AI-Powered Pentesting, Runtime Security

Astra Security and Invary have received new funding to fuel development of their vulnerability scanning and runtime security solutions.

The post Astra, Invary Raise Millions for AI-Powered Pentesting, Runtime Security appeared first on SecurityWeek.

Hacker Who Targeted NATO, US Army Arrested in Spain

Spanish authorities have arrested an individual who allegedly hacked several high-profile organizations, including NATO and the US army.

The post Hacker Who Targeted NATO, US Army Arrested in Spain appeared first on SecurityWeek.

Five Eyes Agencies Release Guidance on Securing Edge Devices

Five Eyes cybersecurity agencies have released guidance on securing edge devices against increasing threats.

The post Five Eyes Agencies Release Guidance on Securing Edge Devices appeared first on SecurityWeek.

Security Teams Pay the Price: The Unfair Reality of Cyber Incidents

The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the inevitable.

The post Security Teams Pay the Price: The Unfair Reality of Cyber Incidents appeared first on SecurityWeek.

SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images

A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple’s and Google’s respective app stores to steal victims’ mnemonic phrases associated with cryptocurrency wallets.
The attacks leverage an optical character recognition (OCR) model to exfiltrate select images containing wallet recovery phrases from photo libraries to a command-and-control (C2) server,

Cisco Patches Critical Vulnerabilities in Enterprise Management Product

Critical vulnerabilities in Cisco Identity Services Engine could lead to elevation of privileges and system configuration modifications.

The post Cisco Patches Critical Vulnerabilities in Enterprise Management Product appeared first on SecurityWeek.

The Evolving Role of PAM in Cybersecurity Leadership Agendas for 2025

Privileged Access Management (PAM) has emerged as a cornerstone of modern cybersecurity strategies, shifting from a technical necessity to a critical pillar in leadership agendas. With the PAM market projected to reach $42.96 billion by 2037 (according to Research Nester), organizations invest heavily in PAM solutions.

Why is PAM climbing the ranks of leadership priorities? While Gartner

North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials

The North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC).
The attacks commence with phishing emails containing a Windows shortcut (LNK) file that’s disguised as a Microsoft Office or PDF document.

Cyber News