Follow us on Bluesky, Twitter (X) and Facebook at @Hackread

Beware of refund schemes targeting consumers in the Middle East. Learn how scammers exploit government portals and remote access tools to steal sensitive data and money.

Learn about the collaboration of Play ransomware with the Andariel group. Explore the tactics used in this sophisticated cyber attack.

Discover the security flaw, CVE-2024-12754, found in AnyDesk. Find out how this vulnerability could grant unauthorized access and complete control of a system.

Field Effect reveals a cyberattack that used newly discovered SimpleHelp RMM software vulnerabilities to deploy the Sliver backdoor and establish persistence mechanisms.

Uncover the details of the LockBit encryption attack using remote code execution vulnerabilities in Confluence. Learn more.

Explore the rise of Medusa ransomware attacks, increasing by 42%. Understand the threat and protective measures you can take.

Kimsuky APT is using HWP documents and stealthy AnyDesk backdoors in a new phishing campaign to infiltrate systems under the guise of academic collaboration.

Nos últimos anos, o AnyDesk se tornou uma das ferramentas de acesso remoto mais populares do mundo. Usado por empresas de suporte técnico e…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A new report details a new trojan, MostereRAT, that uses legitimate remote access tools like AnyDesk and TightVNC to maintain covert control.

A new report reveals The Gentlemen ransomware group is using legitimate drivers and Group Policy to bypass defenses and deploy highly tailored malware.

Ransomware groups are hijacking legitimate RATs like AnyDesk and Splashtop to gain stealthy persistence, spread laterally, and disable antivirus software in enterprise networks.

ASEC exposed Trigona RaaS attacking exposed MS-SQL servers via brute-force. The group uses CLR Shell, a new Rust-based scanner, and the BCP utility to store and execute malware from database tables.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

DeadLock Ransomware uses BYOVD (Baidu driver exploit) and the EDRGay.exe loader to kill EDR/AV at the kernel level. It uses a custom stream cipher and deletes shadow copies to prevent recovery.

Trigona ransomware swaps Rclone for a custom tool that rotates connections to evade monitoring. Learn how uploader_client.exe powers their data theft.

At a glance Actor / group Rare Werewolf (aka Librarian Ghouls, Rezet) — suspected Activity Invoice-themed spear-phishing that installs AnyDesk for remote access Targets Russian aerospace and indus…