Tag Archives: attack

The cybersecurity company Proofpoint has found a new operation using the SugarGh0st Remote Access Trojan (RAT) that is going after AI research organizations in the United States.

The operation, linked to a threat cluster known as UNK_SweetSpecter, went after businesses, universities, and government agencies.

Attack Method: Emails with AI-themed bait

UNK_SweetSpecter’s campaign in May 2024 used a free email account to send emails with AI-themed traps to people who might be victims. These emails had a zip archive file to get people to open it.

The zip file dropped an LNK shortcut file that used a JavaScript dropper as soon as it was launched.

ANYRUN malware sandbox’s 8th Birthday Special Offer: Grab 6 Months of Free Service

This dropper…

A clip showing people running for cover at a petrol station has been shared online with false claims it shows scenes from Israel during Iran’s recent attack on 13 April. But the footage in question predates these events.

In the video, people at a petrol station can be seen running and ducking for cover as explosions are heard in the background and bright lights appear in the sky. The lights in the sky look very similar to other clips of missiles being intercepted by Israel’s Iron Dome.   

The video of people at the petrol station has recently been shared widely online with captions like: “Video circulating of the arrival of the first batch of Iranian drones to Israel”. One post shared on 14 April says: “LIVE from Israel: sirens are going off throughout the…

A video is being shared on social media and by some news outlets with false claims it shows Iran’s attack on Israel with drones and missiles.

The night-time clip shows projectiles apparently being fired from the ground into the sky in a rapid barrage. Some versions of the footage include an emoji of Iran’s flag in the top right corner.

These claims have been shared on Instagram, X (formerly Twitter) and YouTube, and the video has also been included in video montages in news reports about Iran’s assault on 13 April. 

Actor and comedian Michael Rapaport also shared the video in two separate posts with his two million Instagram followers, adding in one: “The Iron Dome literally saved millions of life’s [sic] tonight”. We’ve contacted Mr Rapaport for…

Top chipmaker Nexperia suffered a ransomware attack last month which saw threat actors get away with a terabyte of sensitive corporate data. 

“Nexperia has become aware that an unauthorized third party accessed certain Nexperia IT servers in March 2024,” the company said in a statement shared with BleepingComputer. “We promptly took action and disconnected the affected systems from the internet to contain the incident and implemented extensive mitigation.”

Cybersecurity researchers have recently discovered a new vulnerability in the HTTP/2 protocol, which allows threat actors to mount denial of service (DoS) attacks and even crash servers with a single TCP connection.

The vulnerability relates to the use of HTTP/2 CONTINUATION frames, which is why the researcher who found it, Barket Nowotarski, dubbed it “CONTINUATION Flood”.