Russian-Speaking Turla Joins APT Elite
Researchers may have found a link between Moonlight Maze of the late ’90s and the Turla APT, which would elevate Turla to the ranks of the Equation Group as an elite nation-state attacker.
Hacks
Aviation-Related Phishing Campaigns Seeking Credentials
Researchers warn of a wave in aviation-themed phishing attacks that aim to steal credentials and install malware.
New Mirai Variant Carries Out 54-Hour DDoS Attacks
Researchers are tracking a new variant of the Mirai malware after it launched a 54-hour long DDoS attack against a U.S. college.
Microsoft patched a zero-day vulnerability actively used in a campaign by a hacking group known as Zirconium.
Researchers report new connections between Magic Hound and Shamoon 2, along with descriptions of how the Disttrack malware component of campaigns moves laterally within infected networks.
Researcher Matt Nelson disclosed another Windows UAC bypass, this one abusing the sdclt.exe backup and restore utility to execute a payload without triggering an alert.
Security experts say they are skeptical that a group called Turkish Crime Family actually possess a cache of hundreds of millions of Apple iCloud account credentials.
More than a dozen apps removed from Google Play store after it was determined they were overly aggressive adware.
Today’s WikiLeaks Vault 7 Dark Matter release shows the CIA’s capabilities to attack and persist on Apple iPhone and Mac firmware and an apparent interdiction of the iPhone supply chain.
A researcher has published a method by which a local admin can hijack any other Windows sessions without the need for credentials.
