Latest articles
SOCRadar
SolarMarker Distributes Malware Via Fake Chrome Updates
Threat actors related to SolarMarker strike with watering hole attacks as a new method of delivering malware rather than the previously used SEO poisoning method. In this new approach, they…
SOCRadar
Threat Actors Exploit Unpatched Microsoft Exchange Zero-Days (ProxyNotShell)
Security experts caution about actively exploited zero-day vulnerabilities in Microsoft Exchange servers. The flaws could allow remote code execution in fully patched servers. The two flaws are tracked by Zero…
SOCRadar
Brute Ratel C4 Toolkit Gets Cracked and Distributed Online
The cracked version of Brute Ratel C4 (BRC4) is currently being distributed on hacker platforms for free. Posts spreading it have been seen in multiple hacking forums and Telegram and…
SOCRadar
Critical WhatsApp Vulnerabilities Allow Attackers Remote Device Hacking
WhatsApp’s September security update fixes two high-severity flaws that could result in remote code execution . The flaws affect WhatsApp and WhatsApp Business versions before 2.22.16.12 in iOS and Android…
SOCRadar
Threat Actors Impersonate GitHub, Zoom, and Cloudflare to Steal User Information
Hackers frequently look for ways to trick users and organizations, as the weakest link in security is the human factor. This makes phishing one of the most common entry attacks.…
SOCRadar
Exmatter Tool Provides a New Strategy for Extortion
Data exfiltration malware Exmatter, previously associated with the BlackMatter ransomware gang, now has data corruption capabilities. This could signify a new strategy ransomware affiliates may use in the future. Although…
SOCRadar
Threat Actors Utilize PowerPoint Files to Distribute Graphite Malware
Threat actors started utilizing PowerPoint presentations as a code execution method and delivering Graphite malware in targeted attacks. APT28 (Fancy Bear) , a threat actor group linked to Russia, has…
SOCRadar
FARGO Ransomware Targets Vulnerable Microsoft SQL Servers
Microsoft SQL database servers are the target of a new ransomware attack campaign called FARGO ransomware. FARGO, also known as TargetCompany, aims to double-extort victims. This year’s ransomware attacks against MS-SQL…
Never miss a critical advisory.
Join 30,000+ security professionals who read SOCRadar research every week.
See SOCRadar in Action