CYFIRMA Research

CYFIRMA

0.0 (0)
TECH NEWS
UPDATED WEEKLY

Cyber defenders, listen up! The CYFIRMA Research podcast has some juicy intel on the latest cyber threats that are lurking in the shadows. Tune in to this security briefing to stay on top of emerging threats and be ready to tackle digital risk like never before.

1 DAY AGO

CYFIRMA Research- NonEuclid Remote Access Trojan (RAT)

At CYFIRMA, we continuously analyze the tactics and techniques employed by threat actors. One such technique is Remote Template Injection, which exploits Microsoft Word's template functionality to bypass traditional defenses. Used by Advanced Persistent Threat (APT) groups, this method disguises malicious payloads in seemingly harmless documents, making it a potent tool in spear-phishing campaigns. Our latest report uncovers how attackers exploit Word’s XML-based OOXML format to inject m...

5 min
5 DAYS AGO

CYFIRMA Research- Inside FireScam: An Information Stealer with Spyware Capabilities

Introducing FireScam: A New Android Malware Threat The CYFIRMA research team have uncovered a new, sophisticated Android malware - FireScam, an advanced information-stealing malware with spyware capabilities. Disguised as a fake ‘Telegram Premium’ app, this malware is spread through phishing websites and targets users with the intent to steal sensitive information. Once installed, it stealthily monitors notifications, text messages, and app activity, exfiltrating data via encrypted chann...

4 min
12/31/2024

CYFIRMA Research- CVE-2024-10914: A Critical Vulnerability in D-Link NAS Devices

A critical vulnerability, CVE-2024-10914, has been discovered in unsupported D-Link devices, including DNS-320, DNS-320LW, DNS-325, and DNS-340L. With over 60,000 devices potentially exposed and nearly 1,100 actively exploited since Nov 12, 2024, attackers are leveraging this flaw to steal data, deploy ransomware, and compromise networks.If you’re using legacy D-Link devices, it's crucial to retire and replace them immediately. These devices no longer receive security updates, leaving them vu...

3 min
12/30/2024

CYFIRMA Research- How Festive Events Have Become Prime Targets for Digital Exploitation and Fraud

The CYFIRMA research team is proud to offer insights into the increased cyber risks the holiday season brings! Stay alert, verify offers, and keep your information safe!As the year end of season approaches, watch out for scammers using advanced tactics. Phishing emails might offer irresistible deals but could contain malicious links - always verify before clicking! Be cautious of fake websites and typo-squatting domains that mimic popular retail sites; double-check URLs before purchasing. Sca...

7 min
12/16/2024

CYFIRMA Research- Bizfum Stealer

Cybercriminals are stepping up their game with Bizfum Stealer, a highly sophisticated malware targeting sensitive data such as browser credentials, files, and Discord tokens. It utilizes advanced encryption techniques and Telegram bots for stealthy data exfiltration. 1. It extracts browser passwords, cookies, and saved credentials. 2. Screenshots and clipboard data theft. 3. Sensitive files (.jpg, .pdf, .docx, etc.) exfiltrated silently. 4. Hijacks Discord tokens an...

7 min
12/13/2024

CYFIRMA Research- Russia as a Threat Actor in the UK

The UK faces an escalating cyber threat landscape dominated by sophisticated Russian actors, including state-affiliated groups like Sandworm and APT29, as well as privateer entities operating with Kremlin leniency. To learn more about the Russian cyber threat to the UK, read the full report.Link to the Research Report: RUSSIA AS A THREAT ACTOR IN THE UK - CYFIRMA #Geopolitics #CyfirmaResearch #ThreatIntelligence #cybersecurity #ExternalThreatLandscapeManagement #currentaffairs #ETLM #C...

7 min
12/12/2024

CYFIRMA Research: Tracking Ransomware- November 2024

Stay ahead of cybersecurity trends with CYFIRMA's November 2024 Ransomware Report. Ransomware incidents rose by 15.65%, affecting 606 victims worldwide. Emerging groups like Chort, Ymir, and SafePay deployed advanced techniques. Ransomware groups are seen exploiting critical vulnerabilities like Veeam Backup systems and targeting weekends for reduced detection. Key sectors such as Manufacturing, Healthcare, and Finance experienced significant attacks, while the USA led with 326 victims. ...

5 min
12/10/2024

CYFIRMA Research- Unidentified Threat Actor Utilizes Android Malware to Target High-Value Assets in South Asia

Our team at CYFIRMA analyzed a malicious Android sample used in a targeted attack leveraging the Spynote Remote Administration Tool (RAT). We believe that the threat actor behind the targeted attack could be an APT. Delivered via WhatsApp with payloads disguised as apps like "Best Friend" and "Friend," the attack aimed to compromise high-value assets. All payloads were linked to the same command-and-control server and featured obfuscation techniques. While specific target details remain confi...

2 min

See All (182)

Creator

CYFIRMA
Years Active

2023 - 2025
Episodes

182
Rating

Clean
Show Website

CYFIRMA Research

CYFIRMA Research

Episodes

CYFIRMA Research- NonEuclid Remote Access Trojan (RAT)

CYFIRMA Research- Inside FireScam: An Information Stealer with Spyware Capabilities

CYFIRMA Research- CVE-2024-10914: A Critical Vulnerability in D-Link NAS Devices

CYFIRMA Research- How Festive Events Have Become Prime Targets for Digital Exploitation and Fraud

CYFIRMA Research- Bizfum Stealer

CYFIRMA Research- Russia as a Threat Actor in the UK

CYFIRMA Research: Tracking Ransomware- November 2024

CYFIRMA Research- Unidentified Threat Actor Utilizes Android Malware to Target High-Value Assets in South Asia

About

Information