Sysdig’s Post

Sysdig Threat Research Team (TRT) exposes a long-running botnet operation - their modus operandi and motivation. Read to learn how this decade-long develops botnets and target data for financial gains.

Huge discovery! 🔎 The Sysdig Threat Research Team has exposed 𝗥𝗨𝗕𝗬𝗖𝗔𝗥𝗣, a decades-old Romanian group of cybercriminals. Insights from their private chats showcase how they use IRC servers for internal comms and leverage botnets to profit from #cryptomining & #phishing campaigns. Get the full story directly from Sysdig TRT:

🔎 The Sysdig's Threat Research Team has exposed 𝗥𝗨𝗕𝗬𝗖𝗔𝗥𝗣, a decades-old Romanian group of cybercriminals. Insights from their private chats showcase how they use IRC servers for internal comms and leverage botnets to profit from #cryptomining & #phishing campaigns. Get the full story directly from Sysdig TRT:

🚨 The Durian Malware Attack on South Korean Crypto Firms 🚨 In the intricate and ever-evolving landscape of cybersecurity, the recent emergence of the Durian malware, deployed by North Korea's Kimsuky hacking group, has sent shockwaves through the digital realm. This sophisticated Golang-based malware, as detailed in Kaspersky's APT trends report for Q1 2024, signifies a targeted assault on... To continue reading, visit our blogsite 👇 https://lnkd.in/gm2MdNTh #CybersecurityThreats #NorthKoreaHackers #CryptoSecurity #MalwareAttacks #KimsukyAPT #CybersecurityAwareness

In a recent cybersecurity revelation, a formidable and highly sophisticated cyber threat has surfaced, going by the name DarkCasino. Initially perceived as a phishing campaign orchestrated by the EvilNum group, recent analyses by cybersecurity firm NSFOCUS have reclassified DarkCasino as an advanced persistent threat (APT). This shift in classification is attributed to DarkCasino’s remarkable technical capabilities and its adept integration of various APT attack technologies. https://lnkd.in/d-57e_jB

From Cryptojacking to DDoS Attacks: Diicot Expands Tactics with Cayosin Botnet. Cybersecurity researchers have discovered previously undocumented payloads associated with a Romanian threat actor named Diicot, revealing its potential for launching distributed denial-of-service (DDoS) attacks. https://lnkd.in/d3ckfp4J #cybersecurity #DDoS #sticconsultantcompany #cryptojacking

DLL hijacking in the Asian gambling sector, Cuba ransomware group targeting a critical US infrastructure company, ABRAT generating income through cryptomining, and more! Get the latest in #cybersecurity in this edition of Anomali Cyber Watch 🗞️ https://lnkd.in/gv3pSVpx

DownEx, a previously unknown malware campaign, has been observed actively targeting Central Asian government institutions for cyberespionage. According to the researchers, the attack demonstrates the sophistication of a modern cyberattack. Researchers believe that a state-sponsored group is responsible for these incidents based on the specific targets of the attacks, document metadata that impersonates a real diplomat, and the primary focus on data exfiltration. According to Bitdefender researchers, while the attacks have not been attributed to a specific threat actor, they are likely the work of a Russian group. Get more explanation on this topic at: https://lnkd.in/ghanzYQR For reaching out better cyber security protection measures and avoid tremendous losses, visit wwwhttps://lnkd.in/gZpuCQ86 #blockchain #data #community #hardware #network #growth #internetofthings #infrastructure #DownEx #MalwareTakedown #DigitalSecurity #cybersecurity #Russia #malware #hackers #cybercriminal #freelancers #ai #cloud #splunk #fortinet #jumpcloud #cyberthreats #logicfinder #networkfort #IT #security #control #cyber #attack #breach #cisco #fortinet #cloud

🔥 While this article is a bit amusing in that there No Honor Among Thieves. Anyone having pen testing tools + their crypto wallet(s) or use that device for any other personal matters is just looking for trouble. "A New campaign has been observed making use of malicious OpenBullet configuration files to target inexperienced cyber criminals with the goal of delivering a remote access trojan (RAT) capable of stealing sensitive information." #hacking #opensource #cybersecuritynews #openbullet #pentesting #RAT #cybersecurityawareness https://lnkd.in/e4hyXSF6