Security news that informs and inspires

2376 articles by

Lazarus Group Gopuram Backdoor Found at Some 3CX Victims

A backdoor named Gopuram used by the Lazarus Group has been found in a small number of environments compromised in the 3CX supply chain attack.

3cx, North Korea

Supply Chain Attacks: ‘The Best Bang For Your Buck’

The supply chain attack against 3CX may have been planned for more than a year, and such intrusions are the best return on investment for attackers, researchers say.

Supply Chain Security, 3cx, Solarwinds

Winter Vivern Goes After Diplomats and Government Agencies

The Winter Vivern APT group is now targeting government agencies and diplomats from the United States and European countries.

Malware, Russia

3CX Windows App Compromised in Supply Chain Attack

Two versions of the 3CX Windows electron app were compromised in a targeted supply chain attack, and researchers have connected it to a North Korean attack group.

Malware

New Spyware Campaigns Exploit iOS and Android Zero Days

Researchers at Google and Amnesty International have found new spyware campaigns that exploited multiple iOS, Android, and Linux zero days.

Google, Government, Apple