TRU Security

Recent research shows that a previously undocumented form of cyber-espionage malware, named DazzleSpy, exploited the Safari web browser in a watering hole attack. The intended targets appear to be Hong Kong-based pro-democracy political activists, including the D100 radio station, which reaches over 10,000 listeners every day.

An ongoing wave of spam is sending out emails with a dangerous PowerPoint attachment. This file contains an obfuscated macro that, once activated, uses a combination of PowerShell and Mshta to run its malicious payload — a script that downloads either the Ave Maria or AgentTesla malware.

A new infostealer called BHUNT is looting cryptocurrency wallet contents, passwords, and security phrases.

The infamous FIN8 hacking group appears to be entering the ransomware space with a new ransomware strain dubbed White Rabbit.

DHL has dethroned Microsoft as the most imitated brand for phishing attacks in the final quarter of 2021.

Linux is the operating system of choice for about 72% of IoT devices, 90% of cloud infrastructure, and all of the top 500 supercomputers, making it a lucrative target for cybercriminals. It seems they are taking notice, as Linux malware rose by 35% in 2021.

Russian law enforcement recently conducted raids at 25 locations across Russia and arrested 14 people in relation to the REvil ransomware group.