The cyberattacks, linked to a Chinese-speaking APT, deliver the new MysterySnail RAT malware to Windows servers.

https://threatpost.com/windows-zero-day-exploited-espionage/175432/

The little snippet of Python code strikes fast and nasty, taking less than three hours to complete a ransomware attack from initial breach to encryption.

https://threatpost.com/vmware-esxi-encrypted-python-script-ransomware/175374/

The rare UEFI bootkit drops a fully featured backdoor on PCs and gains the ultimate persistence by modifying the Windows Boot Manager.

https://threatpost.com/especter-bootkit-malware-espionage/175366/

Joseph Carson, Chief Security Scientist at ThycoticCentrify, offers a 7-step practical IR checklist for ensuring a swift recovery from a cyberattack.

https://threatpost.com/incident-response-plan-security-disaster/175335/

An analysis of second-quarter malware trends shows that threats are becoming stealthier.

https://threatpost.com/encrypted-fileless-malware-growth/175306/

The banking trojan keeps switching up its lies, trying to fool Android users into clicking on a fake Flubot-deleting app or supposedly uploaded photos of recipients.

https://threatpost.com/flubot-malware-targets-androids-with-fake-security-updates/175276/

Access to heart monitors disabled by the attack allegedly kept staff from spotting blood & oxygen deprivation that led to the baby’s death.

https://threatpost.com/babys-death-linked-ransomware/175232/

Apple’s personal item-tracker devices can be used to deliver malware, slurp credentials, steal tokens and more thanks to XSS.

https://threatpost.com/apple-airtag-zero-day-trackers/175143/

The mobile malware has fleeced hundreds of millions of dollars from victims globally, using sophisticated techniques.

https://threatpost.com/grifthorse-money-stealing-trojan-android/175130/

The Conti ransomware gang has developed novel tactics to demolish backups, especially the Veeam recovery software.

https://threatpost.com/conti-ransomware-backups/175114/

Newly discovered code resembles the Kazuar backdoor and the Sunshuttle second-stage malware distributed by Nobelium in the SolarWinds supply-chain attacks.

https://threatpost.com/tomiris-backdoor-solarwinds-malware/175091/

The BloodyStealer trojan helps cyberattackers go after in-game goods and credits.

https://threatpost.com/gamers-malware-steam-epic-ea-origin-accounts/175081/

A ‘nearly impossible to analyze’ version of the malware sports a bootkit and ‘steal-everything’ capabilities.

https://threatpost.com/finspy-surveillance-kit/175068/

Microsoft is warning that the Nobelium APT is compromising single-sign-on servers to install a post-exploitation backdoor that steals data and maintains network persistence.

https://threatpost.com/solarwinds-active-directory-servers-foggyweb-backdoor/175056/

Income level, education and being part of a disadvantaged population all contribute to cybercrime outcomes, a survey suggests.

https://threatpost.com/women-minorities-hacked/175038/

The mobile baddie grants itself access to almost everything, enabling spying, data-harvesting, stalking and fraud attacks, among others.

https://threatpost.com/tanglebot-malware-device-functions/174999/

After news of REvil’s rip-off-the-affiliates backdoor & double chats, affiliates fumed, reiterating prior claims against the gang in “Hackers Court.”

https://threatpost.com/revil-affiliates-leadership-cheated-ransom-payments/174972/

Casey Ellis, founder, CTO and chairman of Bugcrowd, discusses a roadmap for lowering risk from cyberattacks most effectively.

https://threatpost.com/tips-cybersecurity-risk-management/174968/

A custom “SparrowDoor” backdoor has allowed the attackers to collect data from targets around the globe.

https://threatpost.com/famoussparrow-spy-hotels-governments/174948/

It’s the second agricultural business to be seized this week and portends a bitter harvest with yet another nasty jab at critical infrastructure.

https://threatpost.com/crystal-valley-farm-coop-hit-with-ransomware/174928/