Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts.
The “intriguing” campaign, codenamed CRON#TRAP, starts with a malicious Windows shortcut (LNK) file likely distributed in the form of a ZIP archive via a phishing email.
“What makes the CRON#
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-11-08 08:06:512024-11-08 08:06:51New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability, tracked as CVE-2024-5910 (CVSS score: 9.3), concerns a case of missing authentication in the Expedition migration tool that
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-11-08 06:06:462024-11-08 06:06:46CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability
In a regulatory filing on Thursday evening, Newpark Resources said it discovered the ransomware attack on October 29 that affected internal information systems.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-11-08 00:06:532024-11-08 00:06:53New SteelFox Malware Posing as Popular Software to Steal Browser Data
A group tracked as BlueNoroff is sending phishing emails to cryptocurrency-related firms, with the intention of sneaking malware onto Mac computers, researchers said.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-11-07 23:08:072024-11-07 23:08:07Business Leaders Shift to Tangible AI Results, Finds New TeamViewer Study
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-11-07 22:07:392024-11-07 22:07:39Cisco Bug Could Lead to Command Injection Attacks
Mistral AI launches a powerful multilingual content moderation API to challenge OpenAI, addressing growing concerns about AI safety with advanced tools to detect harmful content across nine categories.Read More
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-11-07 21:07:302024-11-07 21:07:30Mistral AI takes on OpenAI with new moderation API, tackling harmful content in 11 languages
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
Top Vulnerability Management Tools: Reviews & Comparisons 2024
/in General NewsThere are a great many vulnerability management tools available. But which is best? Here are our top picks for a variety of use cases.
Security | TechRepublic – Read More
New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus
/in General NewsCybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of establishing remote access to the compromised hosts.
The “intriguing” campaign, codenamed CRON#TRAP, starts with a malicious Windows shortcut (LNK) file likely distributed in the form of a ZIP archive via a phishing email.
“What makes the CRON#
The Hacker News – Read More
CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability
/in General NewsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability, tracked as CVE-2024-5910 (CVSS score: 9.3), concerns a case of missing authentication in the Expedition migration tool that
The Hacker News – Read More
Texas-based oilfield supplier faces disruptions following ransomware attack
/in General NewsIn a regulatory filing on Thursday evening, Newpark Resources said it discovered the ransomware attack on October 29 that affected internal information systems.
The Record from Recorded Future News – Read More
New SteelFox Malware Posing as Popular Software to Steal Browser Data
/in General NewsSteelFox malware targets software pirates through fake activation tools, stealing credit card data and deploying crypto miners. Learn…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Xiphera & Crypto Quantique Announce Partnership
/in General NewsPost Content
darkreading – Read More
North Korea allegedly targeting crypto businesses with Mac-focused malware
/in General NewsA group tracked as BlueNoroff is sending phishing emails to cryptocurrency-related firms, with the intention of sneaking malware onto Mac computers, researchers said.
The Record from Recorded Future News – Read More
Business Leaders Shift to Tangible AI Results, Finds New TeamViewer Study
/in General NewsPost Content
darkreading – Read More
Cisco Bug Could Lead to Command Injection Attacks
/in General NewsThough Cisco reports of no known malicious exploitation attempts, three of its wireless access points are vulnerable to these attacks.
darkreading – Read More
Mistral AI takes on OpenAI with new moderation API, tackling harmful content in 11 languages
/in General NewsMistral AI launches a powerful multilingual content moderation API to challenge OpenAI, addressing growing concerns about AI safety with advanced tools to detect harmful content across nine categories.Read More
Security News | VentureBeat – Read More