E4del and PINHOLE RATs Abuse FTP Banners as Dead Drop Resolvers
Cybersecurity researchers have uncovered a novel campaign that abuses FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote…
Tag: Cloudflare Workers
Operation QUICSILVER: New Go Backdoor Targets Myanmar Government and IT Sectors
Cybersecurity researchers have uncovered a cyber espionage campaign targeting Myanmar government and IT sectors, dubbed Operation QUICSILVER. The campaign, first observed in…
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
A set of 40 malicious Mozilla Firefox extensions has been discovered masquerading as popular Web3 products like OKX, Rabby Wallet, and TronLink…
Cloudflare Workers Spectre Attack Leaks JWT at 12 Bits Per Second
Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker…
Durable Objects: Stateful Workloads on Cloudflare Workers
Durable Objects are a Cloudflare Workers feature that provides stateful, long-lived execution. Researchers found that they could keep a Worker isolate alive…
TWINLOOT Malware Abuses SharePoint and Teams to Steal Credentials and Pivot Networks
Cybersecurity researchers have uncovered a new Python-based implant framework called TWINLOOT that abuses trusted Microsoft services for command-and-control (C2) operations. The malware,…
Cloudflare Workers Used for Data Exfiltration
Fifteen malicious Firefox extensions exfiltrate wallet secrets through Cloudflare Workers, leveraging the service for data theft.
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A new campaign has been discovered publishing nearly 800 malicious packages to the npm registry, designed to deliver a cross-platform remote access…
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
Microsoft Removes 119 Edge Extensions Hiding Malware in Images and Fonts
Microsoft has removed 119 malicious extensions from the Edge Add-ons store that used steganography to hide malware in image and font files.…