Os ataques de ransomware no Japão surgem 1,4 vezes, sinalizando um aumento significativo nas ameaças cibernéticas

Por
Chinese Hackers Exploit SharePoint Flaws to Deploy Backdoors, Ransomware, and Loaders

O Japão teve um aumento significativo nos ataques de ransomware no primeiro semestre de 2025, com incidências aumentando cerca de 1,4 vezes no mesmo período do ano anterior. De acordo com uma investigação detalhada da Cisco Talos, 68 casos de ransomware direcionaram organizações japonesas, incluindo empresas domésticas e suas filiais no exterior, de janeiro a … Ler mais

Pharmaceutical Company Inotiv Confirms Ransomware Attack

Por
Pharmaceutical Company Inotiv Confirms Ransomware Attack

Indiana-based pharmaceutical research firm Inotiv has confirmed that its systems were compromised in a ransomware attack earlier this month, disrupting parts of its business operations. According to a filing with the US Securities and Exchange Commission (SEC), the company detected the incident on August 8. Inotiv said attackers gained unauthorized access and encrypted some of … Ler mais

DOJ takes action against 22-year-old running RapperBot Botnet

Por
DOJ takes action against 22-year-old running RapperBot Botnet

DOJ takes action against 22-year-old running RapperBot Botnet DOJ charges 22-year-old Ethan Foltz of Oregon for running RapperBot, a DDoS botnet behind 370K+ attacks in 80+ countries since 2021. The U.S. DOJ charged 22-year-old Ethan Foltz of Oregon for running the RapperBot botnet, used in over 370,000 DDoS-for-hire attacks since 2021. The criminal service is … Ler mais

Perplexity’s Comet AI browser tricked into buying fake items online

Por
Prompt injection examples

A study looking into agentic AI browsers has found that these emerging tools are vulnerable to both new and old schemes that could make them interact with malicious pages and prompts. Agentic AI browsers can autonomously browse, shop, and manage various online tasks (like handling email, booking tickets, filing forms, or controlling accounts). Perplexity’s Comet … Ler mais

TRM Launches Industry-Wide Platform to Fight Crypto Crimes

Por
TRM Launches Industry-Wide Platform to Fight Crypto Crimes

In an industry-first, TRM Labs has launched Beacon Network, an intelligence-sharing platform designed to prevent illicit funds from leaving the blockchain and build a real-time crypto crime response network. The initiative was announced on August 20 on the heels of new TRM Labs data that showed that at least $47bn in cryptocurrency has been sent … Ler mais

Os atores de ameaças exploram as plataformas de genai para criar ataques de phishing sofisticados e realistas

Por
Threat Actors Use GenAI to Launch Phishing Attacks Mimicking Government Websites

A proliferação de plataformas generativas de IA (GENAI) revolucionou os serviços baseados na Web, permitindo assistência rápida de código, processamento de linguagem natural, implantação de chatbot e construção automatizada de sites. No entanto, os dados de telemetria revelam uma evolução preocupante no ecossistema de Genai, onde os atores de ameaças estão explorando cada vez mais … Ler mais

Mule Operators in META Adopt Advanced Fraud Schemes

Por
Mule Operators in META Adopt Advanced Fraud Schemes

Security researchers have revealed how mule operators across the Middle East, Turkeyand Africa (META) region have evolved from basic internet-masking tricks to sophisticated multi-layer fraud networks that now blend digital deception with physical logistics. According to a new report by Group-IB, two years ago, mule actors relied on simple VPN and proxy tools to mask … Ler mais

Hackers steal Microsoft logins using legitimate ADFS redirects

Por
Picus Red Report 2025

Hackers are using a novel technique that combines legitimateoffice.com links with Active Directory Federation Services (ADFS) to redirect users to a phishing page that steals Microsoft 365 logins. The method lets attackers bypass traditional URL-based detection and the multi-factor authentication process by leveraging a trusted domain on Microsoft’s infrastructure for the initial redirect. Legitimacy of … Ler mais

Lobo escamosa desencadeando ataques para expor segredos ocultos das organizações

Por
Scaly Wolf Unleashing Attacks to Expose Organizations' Hidden Secrets

A gangue Scouly Wolf Advanced Persent Ameaça (APT) mais uma vez direcionou uma empresa de engenharia russa em um sofisticado ataque direcionado que foi descoberto pelos analistas do Doctor Web. Isso mostra que o grupo está determinado a obter segredos corporativos. Esse incidente, ocorrendo em meados de 2025, ecoa um ataque semelhante em 2023, onde … Ler mais

Major password managers can leak logins in clickjacking attacks

Por
Major password managers can leak logins in clickjacking attacks

Six major password managers with tens of millions of users are currently vulnerable to unpatched clickjacking flaws that could allow attackers to steal account credentials, 2FA codes, and credit card details. Threat actors could exploit the security issues when victims visit a malicious pageor websites vulnerable to cross-site scripting (XSS) or cache poisoning, where attackers … Ler mais