Cymru researchers said IcedID malware operators use a wide variety of distribution methods to determine which ones work best against different targets. Moreover, analysts noticed changes in the management of IP addresses of command and control (C&C) servers that negatively affected the infrastru...
Researchers at Oxeye have reported a new vulnerability in the vm2 JavaScript sandbox tracked as CVE-2022-36067. It was codenamed Sandbreak and has a CVSS score of 10 out of 10.vm2 is one of the most popular JavaScript sandboxes, with about 3.5 million downloads per week.According to the researchers,...
Toyota has apologized for leaking data from 296,019 of its customers since 2017. This data breach includes email addresses and unique numbers that Toyota assigns to each customer.Information was leaked from the T-Connect application, created specifically for Toyota customers. It allows users to open...
Cloudflare described the details of the attack.Information security company Cloudflare announced that it had stopped a 2.5 Tbps DDoS attack launched by the Mirai botnet. The DDoS attack targeted the Minecraft server Wynncraft.DDoS attack on Wynncraft serverResearcher Omer Joachimik described this at...
The transition of the group to targets from the United States could mean an aggravation of the cyber conflict between the United States and China.Symantec researchers have reported that the China-linked cyberspy group Budworm (also known as APT27, Bronze Union, Emissary Panda, Lucky Mouse, TG-3390 a...
The project was launched by the Russian-speaking group NoName057(16).Researchers from the information security company Radware have discovered a crowdsourcing project called “DDOSIA” that pays volunteers to carry out DDoS attacks on Western organizations. According to experts, payment for attacks is...