PE Tree, initially developed for internal use is now made available for all security professionals.  Blackberry’s announced at BlackHat USA 2020 that its open-source internal tool PE Tree is now available for all security professionals to use for reverse engineering malware.   In their press...

According to the U.S. Department of Health and Human Services, protected health information (PHI) of patients’ was affected by a data breach at the University of Utah Health. This is the third phishing attack on University of Utah this year. Previous attacks were reported in March and April....

BlackRock Android Malware has a wide range of data theft capabilities, the targeted apps include banking, dating, social media, and instant messaging apps. Discovered by security firm ThreatFabric in May this year, this malware is based on the leaked source code of another malware strain Xerxes. It ...

Billing fraud malware Joker evades Google Play security to infect Android devices. Hidden in legitimate applications, it has targeted Android users to subscribe them to premium services without their consent. It’s a tricky new variant of the Joker malware, identified by researchers with security ...

Researchers with Symantec’s Threat Intelligence team who discovered these attacks confirmed – “dozens of U.S. newspaper websites owned by the same parent company have been compromised by SocGholish injected code”. Using fake software update alerts displayed by the malicious ...

IndiaMART, India’s largest online B2B marketplace for business products and services with 10 million downloads suffered a breach. Sensitive data of more than 40,000 suppliers is believed to be leaked and sold on online forums. Information leaked include suppliers’ user IDs, full names,...

New macOS malware disguised as a Flash Player has been discovered by Cyber security company Intego. It is actively spreading through malicious results in Google searches. The malware is delivered as a Trojan horse application on a .dmg disk image, masquerading as an Adobe Flash Player installer. An...

Using a sophisticated new phishing campaign, attackers used trusted, recognized brand names to bypass security filters and trick victims into giving up their Microsoft Office 365 credentials to bypass security protections and gain access to corporate networks.  Check Point discovered that the campa...