Cyberespionage operation Blind Eagle, also known as APT-C-36, has been using a new multi-stage attack chain to facilitate njRAT remote access trojan deployment, The Hacker News reports.
While the Linux malware is unrelated to the 3CX software supply chain hack disclosed in March, ESET researchers said that the discovery of the malware chain helped them confirm with a “high level of confidence” that the incident was carried out by hackers associated with Lazarus Group.
In the security news: Blizzards, Sleet, Typhoons, Sandstorms and Tsunamis, masking your car stealing tech in a Nokia phone, kill -64, Google doesn't want to fix an RCE, hijacking packages, monitoring macs, beating Roulette, lame advice from Microsoft, are post-authentication vulnerabilities even vulnerabilities?, Ghosts, burpgpt, and do you trust G...
We will talk about Supply chain security, the TPM 2.0 vulnerabilities recently discovered by a Quarkslab researcher, bugs in reference implementations, vulnerability disclosure and perhaps various other topics. Segment Resources: Vulnerabilities in the TPM2.0 reference implementation https://blog.quarkslab.com/vulnerabilities-in-the-tpm-20-referenc...
US accounting firms warned of new phishing campaign BleepingComputer reports that accounting and tax return preparation firms and individuals across the U.S. have been warned by Microsoft regarding an ongoing phishing campaign involving the distribution of the Remcos remote access trojan malware since February in an attempt to exploit the imminent end of the annual tax season.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
