The Blinder Tunnel campaign used a fake Dubai Airports coding test to drop ShelbyLoader V2 on an Iraqi target. See how it works and how to defend.

Related Posts:

• ccTLD Registry Hijacks Let Attackers Mint TLS Certs
• ShinyHunters Hacker Arrest in Jordan Aids FBI Probe
• Warlock Ransomware Group Hits Water and Telecom Operators Through SharePoint Flaws

The post Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq appeared first on Daily CyberSecurity.

Attackers used a PaperCut zero-day to plant a web shell and an AdaptixC2 implant hidden in fake Microsoft Copilot, then took over Active Directory.

Related Posts:

• UAT-11587 Targets Asian Governments With Antino Backdoor
• Microsoft Details NeedyMantis Malware Used for Long-Term Access in Targeted Intrusions
• New MacSync macOS Infostealer Targets Crypto Wallets

The post PaperCut Zero-Day Attack Hides AdaptixC2 Implant Inside Fake Microsoft Copilot appeared first on Daily CyberSecurity.

Operation Master used a GlobalProtect flaw to steal utility data, then fed it into an invoice fraud platform that sent 2.4M+ fake bills in Brazil.

Related Posts:

• ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass
• Konni Launches Operation Conflict Compass Against Ukraine
• Kiteworks Mandates Global Precautionary Server Shutdown

The post Operation Master Turns GlobalProtect Breaches Into Brazilian Invoice Fraud appeared first on Daily CyberSecurity.

Cisco Talos discovered autonomous CLOSEDQUORUM AI malware. The CLOSEDQUORUM AI malware uses multiple LLMs to guide cyberattacks independently.

Related Posts:

• Malicious Terraform Providers Spread Graphalgo Go Malware
• WordPress Must-Use Plugin Malware Uses EtherHiding
• New TASK#STOMP PowerShell Backdoor Targets Windows

The post CLOSEDQUORUM AI Malware Uses LLMs for Autonomous C2 appeared first on Daily CyberSecurity.

Group-IB uncovered Iranian HEAVYGRAM malware campaigns. The HEAVYGRAM malware abuses Telegram channels for command execution and data theft.

Related Posts:

• MovieReaper Malware Spreads via Compromised Torrents
• LLM-Generated PhantomRaven Information Stealer Discovered
• KREMLIN Banking Malware Targets Brazilian Banks

The post HEAVYGRAM Malware Abuses Telegram for Cyberespionage appeared first on Daily CyberSecurity.