November 2021

FBI Warns of APT Group Exploiting FatPipe VPN Zero-day Since May The Federal Bureau of Investigation (FBI) warned of an advanced persistent threat (APT) compromising FatPipe router clustering and load balancer products to breach targets’ networks. FatPipe is a Salt Lake City computer networking hardware firm headquartered specializing in WAN optimization solutions with many Fortune Read more…

RedCurl Corporate Espionage Hackers Resume Attacks with Updated Tools A crew of highly-skilled hackers specialized in corporate espionage has resumed activity, one of their victims this year being a large wholesale company in Russia. Tracked as RedCurl, the group attacked the Russian business twice this year, each time using carefully Read more…

Most SS7 Exploit Service Providers on Dark Web are Scammers The existence of Signaling System 7 (SS7) mobile telephony protocol vulnerabilities is something security researchers warned about in 2016, and it only took a year before the first attacks exploiting them were observed. In the years that followed, governments exploited SS7 Read more…

Russian Ransomware Gangs Start Collaborating with Chinese Hackers ​There’s some unusual activity brewing on Russian-speaking cybercrime forums, where hackers appear to be reaching out to Chinese counterparts for collaboration. These attempts to enlist Chinese threat actors are mainly seen on the RAMP hacking forum, which is encouraging Mandarin-speaking actors to Read more…

TikTok Phishing Threatens to Delete Influencers’ Accounts Researchers have observed a new phishing campaign primarily targeting high-profile TikTok accounts belonging to influencers, brand consultants, production studios, and influencers’ managers. Abnormal Security researchers who spotted the attacks, observed two activity peaks while observing the distribution of emails in this particular campaign, on Read more…

US, UK Warn of Iranian Hackers Exploiting Microsoft Exchange, Fortinet US, UK, and Australian cybersecurity agencies warned today of ongoing exploitation of Microsoft Exchange ProxyShell and Fortinet vulnerabilities linked to an Iranian-backed hacking group. The warning was issued as a joint advisory released by the Cybersecurity and Infrastructure Security Agency (CISA), the Read more…

CISA Releases Cybersecurity Response Plans for Federal Agencies The Cybersecurity and Infrastructure Security Agency (CISA) has released new cybersecurity response plans (known as playbooks) for federal civilian executive branch (FCEB) agencies. CISA’s newly published operational procedures are designed to streamline the process of mitigating security vulnerabilities and responding to incidents Read more…

Threat Actors Offer Millions for Zero-days, Developers Talk of Exploit-as-a-Service While mostly hidden in private conversations, details sometimes emerge about the parallel economy of vulnerability exploits on underground forums, revealing just how fat of a wallet some threat actors have. Some adversaries claim multi-million U.S. dollar budgets for acquiring zero-day Read more…