X-Industry

Cybersecurity experts at Sophos X-Ops have uncovered a new social engineering campaign that relies on a tactic dubbed ‘TerminalFix’ to compromise enterprise networks.  After Microsoft successfully disrupted fraudulent certificate-signing services earlier this year, threat actors quickly pivoted to alternative methods to infiltrate corporate environments. The latest research details how attackers now deceive users into manually pasting malicious commands into Windows Terminal, triggering a comple

Cybersecurity experts at Sophos X-Ops have uncovered a new social engineering campaign that relies on a tactic dubbed ‘TerminalFix’ to compromise enterprise networks.  After Microsoft successfully disrupted fraudulent certificate-signing services earlier this year, threat actors quickly pivoted to alternative methods to infiltrate corporate environments. The latest research details how attackers now deceive users into manually pasting malicious commands into Windows Terminal, triggering a comple

Microsoft has issued a warning about an active cryptojacking campaign that uses AI chatbot interactions to impersonate legitimate systems and direct users to malicious download sites.  Once victims click the links, threat actors establish persistent remote access to compromised computers, potentially enabling further activities such as data theft or ransomware deployment.  The campaign, detailed in a report from Microsoft Defender Experts and the Microsoft Defender Security Research Team, repres

FortiGuard Labs recently observed several targeted phishing campaigns in Taiwan that use themes designed to exploit local business processes.  These campaigns disseminate Winos 4.0 (ValleyRat) and subsequent malicious plugins through weaponized attachments or embedded links.  The lures mimic official communications, such as tax audit notifications, tax filing software installers, and cloud-based e-invoice downloads.