Shield

Malware & Threats

Malware analysis, threat intelligence, and emerging cyber threats

Microsoft Teams phishing targets employees with A0Backdoor malware

Hackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called A0Backdoor.

BleepingComputer8h ago3m3

Google: Cloud attacks exploit flaws more than weak credentials

BleepingComputer

Malware & Threats

Google: Cloud attacks exploit flaws more than weak credentials

Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days.

BleepingComputer9h ago6m0

Dutch govt warns of Signal, WhatsApp account hijacking attacks

BleepingComputer

Malware & Threats

Dutch govt warns of Signal, WhatsApp account hijacking attacks

Russian state-sponsored hackers have been linked to an ongoing Signal and WhatsApp phishing campaign targeting government officials, military personnel, and journalists to gain access to sensitive messages.

BleepingComputer10h ago5m0

Ericsson US discloses data breach after service provider hack

BleepingComputer

Malware & Threats

Ericsson US discloses data breach after service provider hack

Ericsson Inc., the U.S. subsidiary of Swedish networking and telecommunications giant Ericsson, says attackers have stolen data belonging to an undisclosed number of employees and customers after hacking one of its service providers.

BleepingComputer12h ago3m0

Microsoft Teams will tag third-party bots trying to join meetings

BleepingComputer

Malware & Threats

Microsoft Teams will tag third-party bots trying to join meetings

Microsoft says Teams will soon automatically tag third-party bots in lobbies, allowing organizers to control whether they can join meetings.

BleepingComputer14h ago2m0

ShinyHunters claims ongoing Salesforce Aura data theft attacks

BleepingComputer

Malware & Threats

ShinyHunters claims ongoing Salesforce Aura data theft attacks

Salesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users access to more data than intended. However, the ShinyHunters extortion gang claims to be actively exploiting a new bug to steal data from instances.

BleepingComputer14h ago5m0

FBI warns of phishing attacks impersonating US city, county officials

BleepingComputer

Malware & Threats

FBI warns of phishing attacks impersonating US city, county officials

The Federal Bureau of Investigation (FBI) warns that criminals are impersonating U.S. officials in phishing attacks targeting businesses and individuals who request city and county planning and zoning permits.

BleepingComputer15h ago3m0

Why Password Audits Miss the Accounts Attackers Actually Want

BleepingComputer

Malware & Threats

Why Password Audits Miss the Accounts Attackers Actually Want

Password audits often focus on complexity rules but miss the accounts attackers actually target. Specops Software explains how breached passwords, orphaned users, and service accounts can leave organizations exposed.

BleepingComputer17h ago5m0

Microsoft still working to fix Windows Explorer white flashes

BleepingComputer

Malware & Threats

Microsoft still working to fix Windows Explorer white flashes

Microsoft has confirmed that it's still working to fully address a known issue that causes bright white flashes when opening the File Explorer on some Windows 11 systems.

BleepingComputer17h ago2m0

EU court adviser says banks must immediately refund phishing victims

BleepingComputer

Malware & Threats

EU court adviser says banks must immediately refund phishing victims

Athanasios Rantos, the Advocate General of the Court of Justice of the EU (CJEU), has issued a formal opinion suggesting that banks must immediately refund account holders affected by unauthorized transactions, even when it's their fault.

BleepingComputer1d ago3m0

Hackers abuse .arpa DNS and ipv6 to evade phishing defenses

BleepingComputer

Malware & Threats

Hackers abuse .arpa DNS and ipv6 to evade phishing defenses

Threat actors are abusing the special-use ".arpa" domain and IPv6 reverse DNS in phishing campaigns that more easily evade domain reputation checks and email security gateways.

BleepingComputer1d ago6m0

Termite ransomware breaches linked to ClickFix CastleRAT attacks

BleepingComputer

Malware & Threats

Termite ransomware breaches linked to ClickFix CastleRAT attacks

Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.

BleepingComputer2d ago3m0