Huorong Internet Security Targeted by Spark RAT
Huorong is a Chinese security company whose endpoint security product (HipsTray.exe) is specifically targeted by the Spark RAT campaign. The malware attempts…
Tag: endpoint security
Huorong Internet Security: Targeted by Spark RAT
Huorong Internet Security is a Chinese endpoint security program that is specifically targeted by the Spark RAT campaign. The malware attempts to…
SLEEPWALKER Backdoor: A Stealthy Windows Implant Triggered by a Single Network Packet
A newly documented Windows backdoor named SLEEPWALKER has been detailed by independent malware researcher Dominik Reichel. The implant remains dormant in memory…
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have uncovered an ongoing campaign distributing the Weedhack malware to gamers through fake Minecraft clients and SEO poisoning. McAfee Labs…
Microsoft Defender’s Boot-Time Driver Can Be Abused to Delete Security Software
Check Point Research has disclosed a technique that abuses Microsoft Defender's own legitimately signed boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level…
FIN7: Cybercrime Group Known for Targeting Endpoint Security
FIN7 is a financially motivated cybercrime group that has been active since at least 2015. They are known for targeting the hospitality,…
AvNeutralizer: Malware Tool for Disabling Endpoint Security
AvNeutralizer is a malware tool used by threat actors like FIN7 to disable endpoint security software. It leverages legitimate signed drivers, such…
AmnesiaStealer: New Rust-Based macOS Malware Hijacks Chromium Sessions for Live Browser Control
Cybersecurity researchers have uncovered a new macOS-oriented, Rust-based information stealer called AmnesiaStealer that hijacks Chromium web browsers to steal session data and…
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Fortinet FortiGuard Labs has disclosed a long-standing supply chain attack targeting QuickFox, a VPN and network acceleration tool popular among overseas Chinese…