Bairon McAdams

In a recent wave of cyberattacks, attackers have been observed exploiting the robust infrastructure of Google Firebase Hosting. This notorious campaign involves the utilization of the Sorillus remote access trojan (RAT) alongside sophisticated phishing attacks. This article delves into the attack methodology, the exploitation of Firebase’s legitimacy, the intricate obfuscated phishing kit, and recommendations from eSentire’s Threat Response Unit (TRU)

In recent news regarding cyberattacks, Shutterfly, Warner Bros. Discovery, and AMC Theatres have fallen victim to attacks by the Cl0p ransomware group on the MOVEit file transfer system. These companies have now joined the growing list of organizations affected by this notorious criminal gang. While the attacks have caused significant concern, Shutterfly has assured customers that no customer data has

A critical security flaw in the popular WooCommerce Payments WordPress plugin has become a lucrative opportunity for threat actors. The vulnerability, tracked as CVE-2023-28121, enables unauthenticated attackers to impersonate arbitrary users, including administrators, potentially leading to site takeover. In recent days, a massive targeted campaign exploiting this flaw has been observed, posing a significant threat to thousands of websites. Overview