Cyberthreat News
About Cyberthreat News
A 2025 version of the Oyster/Broomstick RAT uses SEO poisoning to target IT professionals and deploys rogue software through deceptive ClickFix CAPTCHA delivery. The malware establishes persistence by leveraging scheduled tasks and malicious DLLs, posing a risk to enterprise networks.
Cybercriminals are exploiting GitHub to resurrect ransomware attacks that use stolen credentials to wipe repositories and demand Bitcoin payments. These incidents demonstrate the dangers of storing sensitive data in public repositories and underscore the need for robust access controls.
Xcape’s Damon Small warns that the U.S. leads the world in phishing attacks, with 61% of all phishing emails targeting U.S. users. He says companies need to spend time assessing the value of their information assets and prioritizing spending on cybersecurity defenses accordingly.
Scattered Spider continues to evade security defenses, using tools like ADRecon and Mimikatz for account takeovers. They then leverage SIM swapping and social engineering to steal sensitive information. The group’s evolving tactics, including encrypted communications, require heightened vigilance from organizations. In addition, a new variant of the BERT ransomware targets VMware ESXi virtualized environments and complicates recovery by invalidating snapshots.