/
vendors:Huntress × latest_source_host:itsecurityguru.org × limpar

Resultados

3 casos · pág. 1/1

itsecurityguru.org · high

Forescout exposes ROMULUS malware delivery panel behind ClickFix campaigns and links Lorem Ipsum and Axolotl loaders to Vice Society tradecraft

Forescout's Vedere Labs has documented ROMULUS, a previously unknown malware delivery platform used in ClickFix campaigns, and new delivery techniques for loaders tied to Vice Society ransomware activity. The server hosting the ROMULUS panel was found during an incident investigation, and six IP addresses exposed the same authentication i…

itsecurityguru.org · high

SEO-poisoning campaign uses fake WatchGuard VPN download site to steal SSL VPN credentials, then serves the genuine signed client

Huntress researchers detailed an SEO-poisoning campaign on 13 October that harvests SSL VPN credentials through a lookalike WatchGuard download page, watchguard-vpn.net, and then delivers the legitimate, validly signed Mobile VPN with SSL installer. Earlier waves used trojanised installers, but this iteration contains no malware, so endpo…