Alerts

A new Linux backdoor called 'SprySOCKS' has raised significant concerns as it targets government agencies in multiple countries, compromising networks to exfiltrate data, steal account credentials, and deploy additional payloads.

A recent phishing campaign was observed utilizing the EvilProxy phishing tool to hijack Microsoft 365 accounts of high-level personnels at leading companies around the world. 

A major Citrix ShareFile secure file transfer vulnerability, identified as CVE-2023-24489, is being targeted by unknown actors, according to CISA.

Security researchers have issued a warning about an increase in phishing activity exploiting Google Accelerated Mobile Pages (AMP) to bypass email security measures and reach the inboxes of enterprise employees. 

Two new Android malware families called 'CherryBlos' and 'FakeTrade' were identified stealing cryptocurrency credentials and funds and conducting frauds.