North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks
ReversingLabs researchers linked the VMConnect campaign to the North Korea-linked APT group Labyrinth Chollima. ReversingLabs researchers believe that the North…
September 2023
CVE-2023-38831 Detection: UAC-0057 Group Exploits a WinRAR Zero-Day to Spread a PicassoLoader Variant and CobaltStrike Beacon via Rabbit Algorithm
The UAC-0057 hacking collective, aka GhostWriter, reemerges in the cyber threat arena by abusing a WinRAR zero-day tracked as CVE-2023-38831…
SapphireStealer: A New Open-Source Information Stealer Malware to Look Out For
A new malware is gaining traction in the cyber world. Dubbed SapphireStealer, this open-source .NET-based information-stealing malware has been observed…
Malicious Generative AI Tools. Buzz, Threat, and Solution
After almost a year of generative AI euphoria and praising the Open.Ai ChatGPT model, it`s time to take a step…
Ransomware-as-a-Service (RaaS) – The Rising Threat to Cybersecurity
Ransomware trends are on the rise, even more so today than in the previous years. According to Group-IB’s Hi-Tech Crime…