Tag Archives: Persistent threats
Gunra Ransomware: US and South Korea Issue Joint Global Advisory
A joint US and South Korea advisory warns global organizations about the escalating Gunra ransomware extortion campaign targeting critical infrastructure. Continue reading
SMOKE SCREEN Campaign Uses Fake Software Updates to Deploy ScreenConnect
Discover how the new SMOKE SCREEN campaign uses fake Adobe and Zoom updates to deploy ScreenConnect for persistent remote access. Continue reading
Pass-ta-key Flaws Target Google Password Manager and Passkey Vaults
Unit 42 discovers Pass-ta-key vulnerabilities targeting Google Password Manager and passkey vaults, allowing attackers to bypass hardware verification and extract master keys. Continue reading
Operation BlueDash Phishing Campaign Deploys Dual RMM Tools
Discover how Operation BlueDash uses fake Microsoft Teams updates and social engineering to deploy dual RMM tools and compromise enterprise endpoints. Continue reading
WP-SHELLSTORM Campaign Exposed: How Hackers Left Their Infrastructure Wide Open
A massive WP-SHELLSTORM campaign targeting over 1.4 million websites has been exposed after hackers accidentally left their operational server unsecured, revealing their entire arsenal. Continue reading
Ghost Phishing: New EvilTokens Campaign Bypasses MFA Security
Discover how the sophisticated ghost phishing campaign utilizes EvilTokens and OAuth exploits to bypass multi-factor authentication and compromise Microsoft 365 accounts. Continue reading
Social Engineering Attacks Surge: ClickFix and ConsentFix Threats
Discover how new social engineering attacks like ClickFix and ConsentFix are bypassing macOS security and Microsoft 365 MFA protocols in 2026. Continue reading
Custom Ransomware Campaign Impersonates Interpol to Target SMBs
A new phishing campaign targeting SMBs delivers custom ransomware disguised as Interpol evidence; security researchers have discovered a fatal flaw for decryption. Continue reading
Signal Backup Security Warning: FBI Alerts Users to Phishing Campaign
The FBI and CISA have issued an urgent warning regarding a Russian phishing campaign targeting Signal backup security, specifically aiming to steal private recovery keys. Continue reading