TECHZONE™

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine https://thehackernews.com/2025/04/gamaredon-uses-infected-removable.html The Russia-linked threat actor known as Gamaredon (aka Shuckworm) has been attributed to a cyber attack targeting a foreign military mission based in Ukraine with an aim to deliver an updated version of a known malware called GammaSteel. The group targeted the military mission of a Western country, per the Symantec Threat Hunter team, with first signs of the malicious activity detected on

Watch out for these traps lurking in search results https://www.welivesecurity.com/en/cybersecurity/watch-out-traps-lurking-search-results/ Here’s how to avoid being hit by fraudulent websites that scammers can catapult directly to the top of your search results

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence https://thehackernews.com/2025/04/europol-arrests-five-smokeloader.html Law enforcement authorities have announced that they tracked down the customers of the SmokeLoader malware and detained at least five individuals. "In a coordinated series of actions, customers of the Smokeloader pay-per-install botnet, operated by the actor known as 'Superstar,' faced consequences such as arrests, house searches, arrest warrants or 'knock and talks,'" Europol said in a

Making it stick: How to get the most out of cybersecurity training https://www.welivesecurity.com/en/business-security/making-it-stick-get-most-cybersecurity-training/ Security awareness training doesn’t have to be a snoozefest – games and stories can help instill ‘sticky’ habits that will kick in when a danger is near

RansomHub affiliates linked to rival RaaS gangs https://www.welivesecurity.com/en/videos/ransomhub-affiliates-linked-rival-raas-providers/ ESET researchers also examine the growing threat posed by tools that ransomware affiliates deploy in an attempt to disrupt EDR security solutions

FamousSparrow resurfaces to spy on targets in the US, Latin America https://www.welivesecurity.com/en/videos/famoussparrow-resurfaces-spy-targets-us-latin-america/ Once thought to be dormant, the China-aligned group has also been observed using the privately-sold ShadowPad backdoor for the first time

Shifting the sands of RansomHub’s EDRKillShifter https://www.welivesecurity.com/en/eset-research/shifting-sands-ransomhub-edrkillshifter/ ESET researchers discover new ties between affiliates of RansomHub and of rival gangs Medusa, BianLian, and Play

You will always remember this as the day you finally caught FamousSparrow https://www.welivesecurity.com/en/eset-research/you-will-always-remember-this-as-the-day-you-finally-caught-famoussparrow/ ESET researchers uncover the toolset used by the FamousSparrow APT group, including two undocumented versions of the group’s signature backdoor, SparrowDoor

Operation FishMedley https://www.welivesecurity.com/en/eset-research/operation-fishmedley/ ESET researchers detail a global espionage operation by FishMonger, the APT group run by I‑SOON

MirrorFace updates toolset, expands targeting to Europe https://www.welivesecurity.com/en/videos/mirrorface-updates-toolset-expands-reach-europe/ The group's Operation AkaiRyū begins with targeted spearphishing emails that use the upcoming World Expo 2025 in Osaka, Japan, as a lure

Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor https://www.welivesecurity.com/en/eset-research/operation-akairyu-mirrorface-invites-europe-expo-2025-revives-anel-backdoor/ ESET researchers uncovered MirrorFace activity that expanded beyond its usual focus on Japan and targeted a Central European diplomatic institute with the ANEL backdoor

AI's biggest surprises of 2024 | Unlocked 403 cybersecurity podcast (S2E1) https://www.welivesecurity.com/en/videos/ai-biggest-surprises-2024-unlocked-403-cybersecurity-podcast-season-2-episode-1/ Here's what's been hot on the AI scene over the past 12 months, how it's changing the face of warfare, and how you can fight AI-powered scams

When IT meets OT: Cybersecurity for the physical world https://www.welivesecurity.com/en/critical-infrastructure/when-it-meets-ot-cybersecurity-physical-world/ While relatively rare, real-world incidents impacting operational technology highlight that organizations in critical infrastructure can’t afford to dismiss the OT threat

Don’t let cybercriminals steal your Spotify account https://www.welivesecurity.com/en/cybersecurity/cybercriminals-steal-spotify-account/ Listen up, this is sure to be music to your ears – a few minutes spent securing your account today can save you a ton of trouble tomorrow

AI-driven deception: A new face of corporate fraud https://www.welivesecurity.com/en/cybersecurity/ai-driven-deception-new-face-corporate-fraud/ Malicious use of AI is reshaping the fraud landscape, creating major new risks for businesses

Kids behaving badly online? Here's what parents can do https://www.welivesecurity.com/en/kids-online/kids-behaving-badly-online-heres-how-parents-can-help/ By taking time to understand and communicate the impact of undesirable online behavior, you can teach your kids an invaluable set of life lessons for a new digital age

Martin Rees: Post-human intelligence – a cosmic perspective | Starmus highlights https://www.welivesecurity.com/en/we-live-science/martin-rees-post-human-intelligence-cosmic-perspective-starmus-highlights/ Take a moment to think beyond our current capabilities and consider what might come next in the grand story of evolution

Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani https://www.welivesecurity.com/en/podcasts/threat-report-h2-2024-infostealer-shakeup-new-attack-vector-mobile-nomani/ Big shifts in the infostealer scene, novel attack vector against iOS and Android, and a massive surge in investment scams on social media

Bernhard Schölkopf: Is AI intelligent? | Starmus highlights https://www.welivesecurity.com/en/we-live-science/bernhard-scholkopf-is-ai-intelligent-starmus-highlights/ With AI's pattern recognition capabilities well-established, Mr. Schölkopf's talk shifts the focus to a pressing question: what will be the next great leap for AI?

This month in security with Tony Anscombe – February 2025 edition https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-february-2025-edition/ Ransomware payments trending down, the cyber-resilience gap facing SMBs, and APT groups embracing generative AI – it's a wrap on another month filled with impactful security news