Threat Overview A recent threat report published by AlienVault on January 10, 2025, has brought to light a new information stealing malware attack leveraging a fake proof-of-concept exploit for the LDAPNightmare vulnerability (CVE-2024-49113). This attack highlights
Continue ReadingBlog
Threat Report: Examining Redtail – Advanced Cryptocurrency Mining Malware
Threat Overview A recent threat report published by AlienVault, titled "Examining Redtail: Analyzing a Sophisticated Cryptomining Malware and its Advanced Tactics", highlights the growing sophistication of cryptocurrency mining malware. The report analyzes Redtail, a stealthy cryptominer
Continue Reading
ICS Threat Report: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation
Threat Overview A recent threat report published by AlienVault reveals a critical zero-day vulnerability, CVE-2025-0282, in Ivanti Connect Secure VPN appliances. This vulnerability has been exploited since mid-December 2024, allowing unauthenticated remote code execution. Exploited Vulnerability
Continue Reading
Threat Report: Formbook Phishing Campaign with Old Payloads
Threat Overview A recent phishing campaign has been observed delivering Formbook stealers through email attachments, as reported by AlienVault on January 7th, 2025. This report provides an analysis of the attack and recommendations for mitigation. The
Continue Reading
Threat Report: Unveiling the Tools and Techniques of APT34
Threat Actor ProfileOilRig, also known as APT34 and Helix Kitten, is a sophisticated state-sponsored threat actor believed to be aligned with Iranian interests. Active since 2016, OilRig primarily targets organizations in the Middle East, focusing on
Continue Reading
Threat Report: Sophisticated Google Domain Exploitation Chain Unleashed
Threat Overview Cyber threats targeting digital assets have become a pressing concern for organizations in various sectors, including e-commerce and finance. A recent threat report published by AlienVault highlighted the emergence of a sophisticated attack chain
Continue Reading
Botnets Continue to Target Aging D-Link Vulnerabilities
Threat Report: Botnets Continue to Target Aging D-Link VulnerabilitiesPublished by AlienVault on 2024-12-31T16:26:24.317ZA recent threat report published by AlienVault highlights the continued exploitation of long-standing vulnerabilities in D-Link routers by two botnets, FICORA and CAPSAICIN. These
Continue Reading
ICS Threat Report: New Malware Can Kill Engineering Processes
Threat Overview Cyber threats targeting industrial control systems (ICS) have become a pressing concern for organizations in various sectors, including energy and manufacturing. A recent threat report published by ICS-CSIRT.io highlighted the emergence of new malware
Continue Reading
Cyberhaven: Chrome Extensions Found Compromised, Threat Actor Uses Other Groups’ Tools
Threat Overview AlienVault has recently published a threat report highlighting the activities of several Chrome extensions that have been compromised. The affected extensions are linked to multiple suspicious domains resolving to the same IP address as
Continue Reading
Andariel (SmallTiger) – ASEC
As a global cybersecurity community, it is essential to stay informed about emerging threats and cyber attacks. This article will provide an overview of the Andariel group and their recent activities in attacking Korean solution providers.
Continue Reading