Cloud Security
-
A new phishing campaign is targeting Windows users with a deceptive technique called ClickFix, tricking victims into executing malicious PowerShell commands. The attack, active since March 2025, deploys a modified version of the Havoc command-and-control (C2) framework through SharePoint abuse, allowing attackers to take full control of compromised systems.
-
A new phishing campaign is targeting industrial organizations in the Asia-Pacific (APAC) region using a dangerous malware called FatalRAT. Hackers are using Chinese cloud services to deliver the malware, making it harder to detect. The attack mainly targets government agencies, manufacturing, IT, telecommunications, healthcare, energy, and logistics companies in countries like Taiwan, Malaysia, China, Japan, and more.
-
A dangerous ransomware called Codefinger is attacking Amazon Web Services (AWS) users by encrypting their data in S3 buckets. Victims cannot recover their files without paying for a decryption key, making this attack a significant threat to cloud-based systems.
-
TeamTNT, a notorious hacking group specializing in cryptojacking, has unleashed a new wave of cyberattacks aimed at cloud-native environments. Exploiting exposed Docker APIs, the group is deploying malware and cryptominers, utilizing breached Docker instances for cryptocurrency mining and renting the compromised infrastructure for profit. This multi-stage campaign highlights the need for vigilant cloud security to prevent unauthorized access and cryptomining activity.
-
Posted: September 27, 2024Views: 106Microsoft has recently highlighted a significant security threat posed by the threat actor known as Storm-0501, marking a concerning trend in ransomware attacks that extend into hybrid cloud environments.
-
Posted: December 01, 2023Categories: Ransomware, Features, Cyber Attack, Data Breach, Cloud Security, Cloud malware, Cloud storage, DDoSViews: 31In the dynamic landscape of cybersecurity, the Cactus ransomware has adeptly navigated through significant vulnerabilities within the Qlik Sense data
-
Posted: June 16, 2023Categories: Events and News, Cyber Attack, Data Breach, Phishing, Browser Hijack, Hacker, Cloud SecurityViews: 22The MOVEit data theft attacks have caused the Clop ransomware gang to start extorting businesses, first posting the names of
-
Posted: May 17, 2023Views: 11Email phishing continues to evolve as cybercriminals become more sophisticated in their tactics. One prevalent form of email phishing involves
-
Posted: March 13, 2023Views: 16Phishing emails can appear to be legitimate messages from a trustworthy source, such as a bank, social media site, or
-
Posted: February 03, 2023Views: 20What is Hybrid cloud storage? Hybrid cloud storage is a storage architecture that combines the benefits of both public cloud