Blog – Page 612 – Cyber Mike

New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT

Cybersecurity researchers have discovered malware campaigns using the now-prevalent ClickFix social engineering tactic to deploy Amatera Stealer and NetSupport RAT.
The activity, observed this month, is being tracked by eSentire under the moniker EVALUSION.
First spotted in June 2025, Amatera is assessed to be an evolution of ACR (short for “AcridRain”) Stealer, which was available under the

DoorDash email spoofing vulnerability sparks messy disclosure dispute

A vulnerability in DoorDash’s systems could allow anyone to send “official” DoorDash-themed emails right from company’s authorized servers, paving a near-perfect phishing channel. DoorDash has now patched the issue, but a contentious disclosure dispute has erupted, with both sides accusing each other of acting in bad faith. […]

Pennsylvania AG confirms data breach after INC Ransom attack

The office of Pennsylvania’s attorney general has confirmed that the ransomware gang behind an August 2025 cyberattack stole files containing personal and medical information. […]

Microsoft: Windows bug blocks Microsoft 365 desktop app installs

Microsoft is working to resolve a known issue preventing users from installing the Microsoft 365 desktop apps on Windows devices. […]

Iranian Hackers Target Defense and Government Officials in Ongoing Campaign

The state-sponsored APT has been targeting the victims’ family members to increase pressure on their targets.

The post Iranian Hackers Target Defense and Government Officials in Ongoing Campaign appeared first on SecurityWeek.

DoorDash Says Personal Information Stolen in Data Breach

Names, addresses, email addresses, and phone numbers were compromised after an employee fell for a social engineering attack.

The post DoorDash Says Personal Information Stolen in Data Breach appeared first on SecurityWeek.

5 Plead Guilty in US to Helping North Korean IT Workers

Audricus Phagnasay, Jason Salazar, Alexander Paul Travis, Erick Ntekereze, and Oleksandr Didenko have pleaded guilty.

The post 5 Plead Guilty in US to Helping North Korean IT Workers appeared first on SecurityWeek.

⚡ Weekly Recap: Fortinet Exploited, China’s AI Hacks, PhaaS Empire Falls & More

This week showed just how fast things can go wrong when no one’s watching. Some attacks were silent and sneaky. Others used tools we trust every day — like AI, VPNs, or app stores — to cause damage without setting off alarms.
It’s not just about hacking anymore. Criminals are building systems to make money, spy, or spread malware like it’s a business. And in some cases, they’re using the same

Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT.
The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers masquerading as legitimate like Google Chrome and Microsoft Teams, according to Elastic Security Labs.
“The

Logitech Confirms Data Breach Following Designation as Oracle Hack Victim

Logitech was listed on the Cl0p ransomware leak website in early November, but its disclosure does not mention Oracle.

The post Logitech Confirms Data Breach Following Designation as Oracle Hack Victim appeared first on SecurityWeek.

Cyber News