Cyber Security News

VanHelsing Ransomware Comes To Encrypt Data
Date

VanHelsing Ransomware Comes To Encrypt Data

Security firm Cyfirma has recently discovered a new ransomware-as-a-service (RaaS) called VanHelsing. Once a name given to mythical slayers of Vampires, VanHelsing is now attached to a criminal enterprise designed to siphon a business' lifeblood in return for decrypting data, which the threat actors

Arcane Stealer Emerges
Date

Arcane Stealer Emerges

In a blog post published by Kaspersky Labs, security researchers revealed the discovery of a new information-stealing malware called Arcane Stealer by the cybersecurity firm. The malware is distributed fairly novel, in that it is distributed via YouTube and videos that provide users with computer ga

Akira Ransomware Bypass EDR Via Unpatched Webcam
Date

Akira Ransomware Bypass EDR Via Unpatched Webcam

In a recent attack by Akira ransomware threat actors, attempts to encrypt data were initially stopped; however, an unpatched webcam proved to be the entry point threat actors were looking for and managed to bypass Endpoint Detection and Response Software installed on the enterprise machines. T

Lazarus Linked To Massive Bybit Crypto Theft
Date

Lazarus Linked To Massive Bybit Crypto Theft

On February 21, 2025, Bybit reported that it had suffered a massive cryptocurrency theft, estimated at 1.46 billion USD using that day's exchange rate. Ethereum (ETH) was stolen from one of its ETH cold wallets, which stores cryptocurrency private keys offline. In practice, private keys are transfe

Black Basta Internal Chat Logs Leaked
Date

Black Basta Internal Chat Logs Leaked

An unknown leaker, going by the alias ExploitedWhispers, has released what they claim to be an archive of internal Matrix chat logs belonging to the Black Basta ransomware operation. Now removed, the stolen messages were originally uploaded to the MEGA file-sharing platform. Since their removal fro

DeepSeek Suffers From The Rise Of LLMJacking
Date

DeepSeek Suffers From The Rise Of LLMJacking

According to a recent report by Sysdig, threat actors employing a new hacking technique known as LLMJacking are actively targeting DeepSeek's latest Large Language Model (LLM) and those using the model for their specific GenAI needs. LLMJacking was first discovered by Sysdig researchers in mid

DeepSeek Exposes Over 1 Million Chat Records
Date

DeepSeek Exposes Over 1 Million Chat Records

Last week, the world was stunned by the performance offered by DeepSeek's R1 Large Language Model, and for a fraction of the cost, it took Open AI and others to develop a model. Along with news regarding how DeepSeek impacted US markets and its possible "Sputnik" moment, DeepSeek also made cybersecu

Lynx Ransomware's Secretive RaaS Revealed
Date

Lynx Ransomware's Secretive RaaS Revealed

Even now, in 2025, ransomware is still one of the most profitable cyber threats for threat actors with the skills to implement attacks. Due in part to this profitability, the threat's evolution continues at breakneck speeds, leaving organizations struggling to defend their digital assets. This is o

Magic Packet Malware Targets Juniper VPN Gateways
Date

Magic Packet Malware Targets Juniper VPN Gateways

According to a recent report published by Lumen's Black Lotus Labs, researchers discovered an attack campaign using a carefully crafted backdoor to target enterprise-grade Juniper routers. Briefly, the attack begins with a passive agent that continuously monitors for a "magic packet" sent by the att

WhatsApp Abused To Target High-Value Diplomats
Date

WhatsApp Abused To Target High-Value Diplomats

In mid-November 2024, Microsoft Threat Intelligence observed a Russian-speaking threat actor, tracked by Microsoft as Star Blizzard, abusing WhatsApp to supplement spear-phishing tactics that target high-value diplomats. As a phishing delivery vehicle, WhatsApp changes the threat actor's long-standi