In November 2024, Microsoft discovered a new remote access trojan (RAT) named StilachiRAT, which employs advanced techniques to avoid detection and steal sensitive data. This malware can extract credentials from web browsers, monitor remote desktop sessions, and collect information about the target system. Currently, there’s no known specific threat actor tied to StilachiRAT, and its ...
As the shift to Web3 technologies grows, the security of digital currencies becomes increasingly important for everyone involved. Cryptocurrencies like Bitcoin and Ethereum, while revolutionary, introduce complex risks. In 2024, over $2.2 billion was lost to crypto hacks, a trend that intensified in early 2025 with nearly $2 billion in thefts attributed to sophisticated groups ...
Credential stuffing attacks surged in 2024, driven by widespread data breaches and the ease of acquiring stolen credentials, which are now readily available for just a few dollars. With billions of compromised accounts circulating online, attackers can easily exploit weak security measures, especially with many users reusing passwords across multiple sites. The introduction of Computer-Using ...
A new cyber threat known as Tangerine Turkey is gaining attention for using a VBScript worm to deliver cryptocurrency mining malware. First identified in November 2023, it quickly climbed to one of the top threats by December. This worm spreads through USB devices and is part of a larger global cryptocurrency mining operation, impacting over ...
Google recently highlighted a cyber threat group called TRIPLESTRENGTH, which is known for targeting cloud environments for cryptojacking and ransomware attacks. According to their latest Threat Horizons Report, this group engages in various malicious activities, including cryptocurrency mining on compromised cloud resources and deploying ransomware like Phobos and RCRU64. They gain access using stolen credentials ...
