ESXiArgs ransomware is spreading fast and has infected over 500 new hosts in France, Germany, the Netherlands, the UK, and Ukraine.

Learn more: https://thehackernews.com/2023/02/esxiargs-ransomware-hits-over-500-new.html

Cybersecurity experts are 🚨 cautioning of a new, previously unreported threat actor located in the Middle East that is targeting telecommunications service providers.

Read details: https://thehackernews.com/2023/02/new-threat-actor-wip26-targeting.html

Cybercriminals are using Google ads to spread FatalRAT malware disguised as popular apps like Chrome, Firefox, Telegram, WhatsApp, LINE, Signal, and Skype to target Chinese-speaking individuals in Southeast and East Asia.

Read details: https://thehackernews.com/2023/02/hackers-using-google-ads-to-spread.html

Heads up, developers! A popular npm package with 3.5 million weekly downloads has been found vulnerable to an account takeover attack.

Read details: https://thehackernews.com/2023/02/researchers-hijack-popular-npm-package.html

SideWinder nation-state group has been attributed to cyber attacks against 61 entities related to government, military, law enforcement, banking, and other organizations in multiple countries.

Learn more: https://thehackernews.com/2023/02/researchers-link-sidewinder-group-to.html

🚨 ALERT: Cybercriminals are using a new version of OxtaRAT backdoor to target Armenian entities.

Read details: https://thehackernews.com/2023/02/armenian-entities-hit-by-new-version-of.html

RambleOn: A new Android malware targeting South Korean journalists has been discovered.

Learn more: https://thehackernews.com/2023/02/experts-warn-of-rambleon-android.html

🚨 GoDaddy, the web hosting services provider, reveals a multi-year security breach that allowed unknown actors to install malware and siphon source code related to some of its services.

Learn more: https://thehackernews.com/2023/02/godaddy-discloses-multi-year-security.html

ALERT: Twitter is limiting the use of SMS-based two-factor authentication to its Blue subscribers only.

If you're not a Blue subscriber, you'll need to switch to other methods, an authenticator app or a hardware security key, by March 20, 2023.

Read: https://thehackernews.com/2023/02/twitter-limits-sms-based-2-factor.html

An employee at the popular cryptocurrency exchange platform, Coinbase, recently fell victim to a cyber attack scam, leading to a small amount of employee data being compromised.

Learn more: https://thehackernews.com/2023/02/coinbase-employee-falls-for-sms-scam-in.html

ALERT: SideCopy, a Pakistani-origin threat group, is using an updated version of the backdoor ReverseRAT to target Indian government entities.

Learn more: https://thehackernews.com/2023/02/researchers-warn-of-reverserat-backdoor.html

Cyber espionage group, Earth Kitsune, is up to their old tricks again.

This time they've hacked a pro-North Korean organization's website and distributed their latest backdoor, WhiskerSpy, to unsuspecting visitors.

https://thehackernews.com/2023/02/north-korean-cyber-espionage-group.html

Fortinet has released security updates to address 40 vulnerabilities in its software, including FortiWeb, FortiOS, FortiNAC & FortiProxy.

Details: https://thehackernews.com/2023/02/fortinet-issues-patches-for-40-flaws.html

Samsung introduces Message Guard, a new feature to safeguard users from zero-click malware and spyware via attacks.

Learn more: https://thehackernews.com/2023/02/samsung-introduces-new-feature-to.html

A new information stealer called Stealc is being advertised on the dark web, gaining traction among criminal groups.

Learn more: https://thehackernews.com/2023/02/researchers-discover-dozens-samples-of.html

Researchers have unveiled a new botnet malware, dubbed "MyloBot," that is spreading rapidly and has already compromised thousands of systems in several countries, including India, the U.S., Indonesia, and Iran.

Read: https://thehackernews.com/2023/02/mylobot-botnet-spreading-rapidly.html

Urgent security update for VMware Carbon Black App Control users!

A critical injection vulnerability (CVE-2023-20858) has been discovered that could allow attackers to access the underlying server operating system.

Details: https://thehackernews.com/2023/02/vmware-patches-critical-vulnerability.html

CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited — IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).

Read more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html

Hackers are adopting an open source C2 framework called Havoc as an alternative to well-known toolkits like Cobalt Strike and Sliver. Zscaler reports that it was utilized in an attack on an unnamed government organization.

Learn more: https://thehackernews.com/2023/02/threat-actors-adopt-havoc-framework-for.html