Webroot

MAY 6, 2024

As we navigate through 2024, the cyber threat landscape continues to evolve, bringing new challenges for both businesses and individual consumers. The latest OpenText Threat Report provides insight into these changes, offering vital insights that help us prepare and protect ourselves against emerging threats.

Antivirus 98

Antivirus Education Cyber threats Phishing 98

Security Boulevard

AUGUST 12, 2024

This can be achieved through protective DNS solutions, or firewall rules to prevent potential malware communications from reaching their command-and-control (C2) servers. Supply Chain Attack with DNS Safeguards StealC & Vidar Malware Campaign Identified More from HYAS Labs Polymorphic Malware Is No Longer Theoretical: BlackMamba PoC.

DNS 64

DNS Malware Accountability Network Security 64

Security Boulevard

APRIL 19, 2023

Enterprise Security at Home For years, businesses have been able to use HYAS Protect to block communication to threat actor infrastructure by using advanced DNS filtering. Setup takes just minutes, and once in place, HYAS Protect At Home will actively block communication with threat actor infrastructure via DNS filtering.

DNS 72

DNS Banking Malware Password Management 72

Security Boulevard

AUGUST 19, 2024

We came across a threat actor that went further to hide their C2 domains by using a simple form of encryption known as a “Substitution Cipher.” This blog post will detail how the cipher works, the IOCs we’ve identified, and email addresses used for domain registration by the actor. What Is a Substitution Cipher?

Malware 64

Malware Encryption DNS Accountability 64

Security Boulevard

SEPTEMBER 4, 2024

Want more threat intel on a weekly basis? Follow HYAS on LinkedIn Follow HYAS on X Read recent HYAS threat reports: HYAS Investigates Threat Actors Hidden In Gaming Services Caught in the Act: StealC, the Cyber Thief in C HYAS Protects Against Polyfill.io

Malware 59

Malware Spyware Software Encryption 59

SecureList

APRIL 27, 2021

In November and December 2020, two public blog posts were published about this campaign. We recently came across previously unknown malicious artifacts that we attributed to the Lyceum/Hexane threat group, showing that the attackers behind it are still active and have been developing their toolset during the last year. Final thoughts.

Malware 145

Malware Government Spyware Social Engineering 145

Security Boulevard

AUGUST 28, 2024

Download: How to Stop Phishing Attacks with Protective DNS Suspicious Domains Identified In our investigation, we have identified a series of suspicious domains, all registered through domain.com and using the same nameservers: ns1.dotster.com Want more threat intel on a weekly basis? dotster.com and ns2.dotster.com. dotster.com.

Phishing 64

Phishing DNS Malware Accountability 64