Articles for tag: Cybersecurity, double extortion, initial access broker, LAGTOY, Malware, Ransomware, ToyMaker

April 26, 2025

ToyMaker Partners with LAGTOY to Facilitate Access to CACTUS Ransomware Gangs for Double Extortion Schemes

Cybersecurity experts have identified an initial access broker called ToyMaker, which is linked to double extortion ransomware groups, including CACTUS. ToyMaker uses custom malware known as LAGTOY to gain access to vulnerable systems, allowing it to create reverse shells and execute commands remotely. Initially documented by Mandiant in early 2023, ToyMaker targets high-value organizations by ...

April 19, 2025

Market News

Crypto

The Unexpected Zoom Attack: How to Protect Your Privacy and Security During Virtual Meetings

A recent warning highlights a growing cyber threat during Zoom calls. Some attackers, known as ELUSIVE COMET, exploit the platform’s remote control feature to gain unauthorized access to users’ computers. They often contact potential victims through social media or email, inviting them to appear on a podcast. During the call, they trick users into granting ...

April 9, 2025

Market News

Crypto

Hackers Use Microsoft Office Add-Ins to Disguise Crypto Address-Swapping Malware: A New Cybersecurity Threat Emerges

Cybersecurity firm Kaspersky has reported that hackers are using fake Microsoft Office extensions on SourceForge to steal cryptocurrencies. One such malicious extension, named “officepackage,” includes a hidden malware called ClipBanker. This malware replaces the copied wallet address in a user’s clipboard with the attacker’s address, leading to stolen funds. The fake listings mimic legitimate software, ...

April 9, 2025

Market News

Crypto

Hackers Conceal Crypto Address-Swapping Malware in Microsoft Office Add-Ins: Protect Your Digital Assets Today

Cybersecurity researchers from Kaspersky have reported that hackers are trying to steal cryptocurrency using malware disguised as fake Microsoft Office extensions on SourceForge. One of the malicious listings, called “officepackage,” includes legitimate Office add-ins but secretly contains a malware called ClipBanker. This malware replaces copied crypto wallet addresses on users’ clipboards with the attacker’s address, ...

April 8, 2025

Market News

Crypto

Cryptocurrency Miner and Clipper Malware: SourceForge Cracked Software Listings Risk Exposed

Cybersecurity experts have identified a concerning trend where attackers are using SourceForge to distribute harmful malware disguised as cracked software, such as Microsoft Office. A project named “officepackage” on SourceForge pretends to offer legitimate Office add-ons but actually leads users to malicious downloads. These downloads contain a hidden zip file that, when extracted, installs additional ...

March 25, 2025

Market News

Crypto

Advanced Malware Threatens Cryptocurrency Wallets: Protect Your Digital Assets Today!

Microsoft has uncovered a new malware, StilachiRAT, targeting cryptocurrency users by stealthily capturing wallet credentials through popular browser extensions. This malware is particularly dangerous as it can compromise widely used wallets like Bitget, Trust Wallet, MetaMask, and more. The ongoing rise in attacks on the cryptocurrency sector aligns with predictions of increased state-sponsored cyber threats ...

March 25, 2025

Market News

Crypto

Advanced Malware Threatens Cryptocurrency Wallets: Protect Your Digital Assets Now!

Microsoft has recently uncovered a new malware called StilachiRAT that specifically targets cryptocurrency users. This sophisticated Remote Access Trojan can stealthily gather sensitive information, particularly crypto wallet credentials from popular web browsers. The malware affects several widely used wallet browser extensions, including Bitget, Trust Wallet, MetaMask, and Coinbase Wallet, among others. If you use any ...

March 18, 2025

Market News

Crypto

StilachiRAT Analysis: Uncovering System Reconnaissance Techniques and Cryptocurrency Theft Trends

In November 2024, Microsoft Incident Response discovered a new remote access trojan (RAT) named StilachiRAT. This malware employs advanced techniques to avoid detection, maintain its presence on infected systems, and steal sensitive data. StilachiRAT has been found to target passwords saved in browsers, digital wallet data, clipboard information, and more. While Microsoft has not linked ...

March 14, 2025

Market News

Crypto

New MassJacker Malware: A Dangerous Threat to Piracy Users and Cryptocurrency Transactions

A new malware called MassJacker is targeting users searching for pirated software, according to CyberArk. MassJacker is a type of clipper malware designed to steal cryptocurrency by replacing copied wallet addresses with attacker-controlled ones. The attack begins on a site that appears to offer pirated software and leads to the download of various malicious files. ...

March 14, 2025

Market News

Crypto

New MassJacker Malware Exploits Piracy Users to Hijack Cryptocurrency Transactions: Protect Your Assets Now!

A new cyber threat named MassJacker is targeting users looking for pirated software, according to CyberArk. This clipper malware monitors clipboard content to steal cryptocurrency by replacing copied wallet addresses with those controlled by attackers. The infection chain starts at a suspicious website offering pirated software, which delivers the malware via a PowerShell script. MassJacker ...