fp-4a - Page 2

Odyssey macOS Stealer Spread via Fake Microsoft Teams Site Targets Cryptocurrency Wallets

Posted: September 08, 2025

Categories: Microsoft, Financial fraud, Fraud Protector

Tags: fp-6d, fp-6a, fp-4c, fp-4a

Author: Npav Lab

Cybercriminals use a fake Microsoft Teams download site to distribute the Odyssey macOS stealer, stealing credentials, crypto wallets, and sensitive data. Learn how to protect your Mac.

PromptLock: The First AI-Powered Ransomware Discovered Using OpenAI's gpt-oss:20b Model

Posted: August 28, 2025

Categories: Ransomware, AI

Tags: fp-4c, fp-4b, fp-4a, fp-3b, fp-3a, fp-1b

Author: Npav Lab

Discover PromptLock, the first AI-powered ransomware using OpenAI's gpt-oss:20b model, enabling sophisticated attacks across multiple platforms.

Lockbit Linux ESXi Ransomware: Evasion Techniques and File Encryption Process

Posted: August 19, 2025

Categories: Ransomware

Tags: fp-6e, fp-6d, fp-6c, fp-6b, fp-6a, fp-4a

Author: Npav Lab

Discover the advanced evasion techniques and encryption methods used by the Lockbit ransomware variant targeting Linux-based ESXi servers. Learn how it operates and the implications for cybersecurity.

Microsoft Teams RCE Vulnerability: Critical Flaw Allows Message Manipulation

Posted: August 13, 2025

Categories: vulnerability, Microsoft

Tags: fp-6d, fp-4a, fp-1b

Author: Npav Lab

Microsoft has revealed a critical RCE vulnerability in Teams (CVE-2025-53783) that could let attackers read, write, and delete messages. Learn about the risks and fixes.

Hackers Bypass Microsoft Defender to Deploy Akira Ransomware

Posted: August 11, 2025

Categories: Ransomware, Hacker, Microsoft

Tags: fp6a, fp-6b, fp-4a, fp-1b, fp-1a

Author: Npav Lab

Hackers exploit a legitimate driver to bypass Microsoft Defender and install Akira ransomware. Learn how this vulnerability works and how to protect your PC.

Hackers Exploit QuickAssist to Steal Data in Under Five Minutes

Posted: August 08, 2025

Categories: Data Breach, Hacker

Tags: fp-6a, fp-4a, fp-1b, fp-1a

Author: Npav Lab

Cybercriminals compromised corporate systems in under five minutes by exploiting QuickAssist and PowerShell scripting. Learn how social engineering facilitated this rapid breach.

Hackers Exploit Free Trials of EDR Software to Bypass Security Protections

Posted: August 07, 2025

Categories: Security, Hacker

Tags: fp-6d, fp-6c, fp-6b, fp-5a, fp-4b, fp-4a

Author: Npav Lab

Cybercriminals are using free trials of Endpoint Detection and Response (EDR) software to disable existing security measures. Learn about the BYOEDR attack technique and its implications.

Hackers Exploit SAP NetWeaver Vulnerability to Deploy Auto-Color Linux Malware

Posted: July 30, 2025

Categories: Malware Alerts, vulnerability, Hacker

Tags: fp-6e, fp-4a, fp-3b, fp-3a

Author: Npav Lab

A recent cyberattack on a US chemicals company exploited the SAP NetWeaver vulnerability CVE-2025-31324 to deploy Auto-Color malware. Learn about the attack details and key takeaways.

Banking Trojan Coyote Exploits Windows UI Automation to Target Users

Posted: July 25, 2025

Categories: Windows, Banking Trojan

Tags: fp-4a, fp-3b, fp-3a, fp-1a

Author: Npav Lab

The Coyote banking Trojan, active since February 2024, is the first malware to exploit the Windows UI Automation framework, targeting banks and crypto exchanges in Brazil. Learn how it operates and the risks involved.

Threat Actors Target Linux SSH Servers to Deploy SVF Botnet

Posted: July 23, 2025

Categories: Cyber Attack, Botnet

Tags: fp-6d, fp-6a, fp-4a

Author: Npav Lab

Cybersecurity researchers reveal a campaign targeting poorly secured Linux servers through SSH brute force attacks to deploy the SVF Botnet, a Python-based DDoS malware using Discord for command-and-control.