Cyber Defense Advisors

News

  • by
  • September 10, 2023

Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks

A legitimate Windows tool used for creating software packages called Advanced Installer is being abused by threat actors to drop cryptocurrency-mining malware on infected machines since at least November 2021. “The attacker uses Advanced Installer to package other legitimate software installers, such as Adobe Illustrator, Autodesk 3ds Max, and SketchUp Pro, with malicious scripts and uses

Cyber News, Cyber Threat Trends
  • by
  • September 10, 2023

Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play

Spyware masquerading as modified versions of Telegram have been spotted in the Google Play Store that’s designed to harvest sensitive information from compromised Android devices. According to Kaspersky security researcher Igor Golovin, the apps come with nefarious features to capture and exfiltrate names, user IDs, contacts, phone numbers, and chat messages to an actor-controlled server. The

Cyber News, Cyber Threat Trends
  • by
  • September 10, 2023

Your Website Got an F in Security

ACM.296 Let’s look at that F and what it actually means — when it matters and when it does not Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends
  • by
  • September 10, 2023

Different Types of Man-In-The-Middle Attacks

ACM.297 Different points of MITM attack and how they can affect victims and websites Continue reading on Cloud Security »

Cyber News, Cyber Threat Trends

Microsoft, Apple versus China, spyware actors

It’s a cat-and-mouse struggle as tech giants Microsoft and Apple deal with persistent threats from China state actors and Pegasus spyware.

Cyber News, Cyber Threat Trends

Regulator to Investigate Fertility App Security Concerns

ICO reveals over half of women are worried about their data

Cyber News, Cyber Threat Trends
  • by
  • September 7, 2023

Emerging cyber threats in 2023 from AI to quantum to data poisoning

Companies using Microsoft Teams got news earlier in the summer of 2023 that a Russian hacker group was using the platform to launch phishing attacks, putting a new spin on a long-known attack strategy. According to Microsoft Threat Intelligence, the hackers, identified as Midnight Blizzard, used Microsoft 365 tenants owned by small businesses compromised in […]

Cyber News, Cyber Threat Trends

Experts Uncover Underground Phishing “Empire” W3LL

Secretive group targets specifically Microsoft 365 accounts

Cyber News, Cyber Threat Trends