Craig Anderson

Over the years, the SysJoker malware has emerged as a potent weapon in the arsenal of threat actors targeting specific entities during periods of conflict. This article delves deep into the recent developments surrounding SysJoker, shedding light on its association with targeted attacks during the Israel-Hamas conflict and its remarkable transformation through a complete code rewrite. Background on the SysJoker

As the world becomes increasingly interconnected, cyber threats continue to pose a significant challenge for nations across the globe. In recent times, a surge in cyberattacks targeting Russia has captured international attention. It has been determined that Asian hackers, specifically state-sponsored threat actors from China and North Korea, are responsible for this unsettling wave of cyber assaults. Admission of COO

In yet another alarming incident of cyber warfare, a North Korean threat group known as Diamond Sleet (Zinc) breached a prominent Taiwanese software company. Microsoft, after extensive analysis and investigation, discovered the breach and revealed critical details about the tactics employed by these malicious actors. This article delves into the incident, providing an in-depth look at the threat actor, the

With the growing popularity of Mac computers, hackers have begun targeting these users with a malicious fake browser update chain called ClearFake. Originally confined to Windows systems, this social engineering initiative has now expanded its scope to encompass geolocation and various operating systems. Expansion of Social Engineering Initiative Malwarebytes, a leading cybersecurity company, reports that threat actors are now targeting

In a shocking turn of events, one of the world’s largest libraries fell victim to a crippling ransomware attack on October 28th. The attack left crucial services disrupted and raised concerns about potential data theft. The library’s recovery efforts are well underway, but it may take weeks, if not months, before full restoration is achieved. Description of the Attack The

The cybersecurity firm TAG recently discovered a critical Cross-Site Scripting (XSS) flaw in Zimbra’s email server (CVE-2023-37580), which was actively exploited in June. This vulnerability posed a significant threat to users’ information and system security. Prompt action is required to effectively address this issue. Zimbra’s Response Recognizing the severity of the issue, Zimbra promptly responded with a hotfix released on