AllaKore RAT Malware Targeting Mexican Firms with Financial Fraud Tricks

Mexican financial institutions are under the radar of a new spear-phishing campaign that delivers a modified version of an open-source remote access trojan called AllaKore RAT.
The BlackBerry Research and Intelligence Team attributed the activity to an unknown Latin America-based financially motivated threat actor. The campaign has been active since at least 2021.
"Lures use Mexican Social

https://thehackernews.com/2024/01/allako...xican.html

VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates

The threat actors behind ClearFake, SocGholish, and dozens of other e-crime outfits have established partnerships with another entity known as VexTrio as part of a massive "criminal affiliate program," new findings from Infoblox reveal.
The latest development demonstrates the "breadth of their activities and depth of their connections within the cybercrime industry," the company said,

https://thehackernews.com/2024/01/vextri...ering.html

is it possible to change something in a .config to use a different interface such as the software calls for a j2534 interface could I somehow change it to recognize a K+DCAN instead..

Series of Cyberattacks Hit Ukrainian Critical Infrastructure Organizations

It's unclear if the attacks — which hit oil and gas, postal service, transport safety, and railway organizations in the nation — were related.


https://www.darkreading.com/cyberattacks...anizations

Microsoft Shares New Guidance in Wake of 'Midnight Blizzard' Cyberattack

Threat actors created and abused OAuth apps to access Microsoft's corporate email environment and remain there for weeks.


https://www.darkreading.com/cyberattacks...yberattack

Newly ID'ed Chinese APT Hides Backdoor in Software Updates

The threat actor went more than half a decade before being discovered — thanks to a remarkable backdoor delivered in invisible adversary-in-the-middle attacks.


https://www.darkreading.com/application-...re-updates

Bastille Raises $44M Series C Investment Led by Goldman Sachs Asset Management




https://www.darkreading.com/threat-intel...management

Black Kite Unveils Monthly Ransomware Dashboards




https://www.darkreading.com/threat-intel...dashboards

Wyden Releases Documents Confirming the NSA Buys Americans' Internet Browsing Records




https://www.darkreading.com/cyber-risk/w...ng-records

NRC Issues Recommendations for Better Network, Software Security

The Network Resilience Coalition pushes adoption of standards like SSDF, OpenEoX and CISA's Secure By Design and Default framework.


https://www.darkreading.com/application-...e-security