Manufacturing

Cybersecurity experts at Check Point have uncovered a new cybercrime group named Magnet Goblin, deploying novel malware on Windows and Linux systems. This group exploits recently patched vulnerabilities, including those in Ivanti Connect Secure, Apache ActiveMQ, ConnectWise ScreenConnect, Qlik Sense, and Magento, to distribute unique malware variants like NerbianRAT, MiniNerbian, and WARPWIRE.

AI remains a significant focus in cybersecurity, with its influence surging in 2023, surpassing traditional cybersecurity strategies, as reported by Forbes. This surge has exposed vulnerabilities, raising concerns about the escalating costs of cybersecurity and the growing threats to privacy and cyber warfare.

According to researchers, in 2024, phishing attacks are surging as cybercriminals harness AI for more sophisticated schemes. With tailored lures and automated tactics, hackers are streamlining efforts, making breaches faster and harder to detect.

A cyberespionage group believed to be linked to the Iranian government has been using a new malware implant called BellaCiao to infect Microsoft Exchange Servers. BellaCiao acts as a dropper for additional payloads and communicates with attackers via DNS queries that encode commands into IP addresses. The group, known as Charming Kitten, APT35, or Phosphorus, is believed to be operated by the Islamic Revolutionary Guard Corps (IRGC) and is known for customizing attacks for each victim. The malware binary contains hardcoded information such as company name, custom subdomains, and IP addresses, and the attackers organize their victims into folders by country code. Charming Kitten has been targeting US critical infrastructure, including seaports, energy companies, transit systems, and a major utility and gas entity since late 2021.