IT Sec News updates – Malware Attacks

SC Magazine

Malware-laced automated software updates have been deployed by Chinese cyberespionage operation StormBamboo, also known as Daggerfly, …

SecurityWeek

Chinese group StormBamboo spotted delivering Windows and macOS malware by compromising an ISP and using DNS poisoning.

TechRadar

Windows and macOS machines alike have been hit by malware after notorious Chinese hacker group StormBamboo used a compromised internet service …

Cybernews

Malicious actors are previously known to use DNS poisoning malware CATCHDNS, which can achieve similar goals in an ISP environment. Poisoning …

Dark Reading

Russia's 'Fighting Ursa' APT Uses Car Ads to Install HeadLace Malware. The scheme, from the group also known as APT28, involves targeting Eastern …

Duo Security

Threat actors compromised an unnamed internet service provider in order to poison DNS responses and target macOS and Windows systems with malware.

Bleeping Computer

South Korea's National Cyber Security Center (NCSC) warns that state-backed DPRK hackers hijacked flaws in a VPN's software update to deploy malware

CISO Series

Hackers send malware through ISP updates, CrowdStrike sued by investors, historic prisoner swap includes cybercriminals returned to Russia.

Cyber Security News

The group utilizes STRRAT, an inexpensive but potent malware available on underground forums for as little as $80. Since late 2023, researchers at BI.

Help Net Security

APT StormBamboo compromised a undisclosed internet service provider (ISP) to poison DNS queries and deliver malware to target organizations.