North Korean Hackers Launch New Durian Malware

by Ophtek, LLC | Jun 18, 2024 | Durian Malware, install updates, Kimsuky, malware, multi factor authentication, North Korea, Ophtek, spear phishing

  A North Korean hacking group has targeted two South Korean cryptocurrency companies with a new strain of malware dubbed Durian. The relationship between North and South Korea has always been troubled, and this latest cyber-attack will do little to resolve these...

Cuttlefish Malware is Putting Your Routers at Risk

by Ophtek, LLC | Jun 11, 2024 | bash script, brute force hacking, Cuttlefish, Data Breach, HiatusRAT, malware, Ophtek, router firmware update, zero-day vulnerabilities

  A new strain of malware, dubbed Cuttlefish, which attempts to hijack your router has been discovered, and it poses a major threat to your data. The experts at Black Lotus Labs recently discovered a number of routers had been compromised by a previously unseen...

MadMXShell Delivers Malware via Google Ads

by Ophtek, LLC | May 28, 2024 | adblocker, google ads, MadMXShell, malware, Ophtek, typosquatting, verify sources, windows backdoor

  MadMXShell Delivers Malware via Google Ads. Thanks to the presence of a previously unknown Windows backdoor, the MadMXShell malware has created digital chaos through the use of Google Ads Google Ads are a common sight for anyone stepping foot online, and...

Chinese PC Maker Ships PCs Customized for Malware

by Ophtek, LLC | Apr 16, 2024 | Acemagic, Bladabindi, China, info stealers, malware, Ophtek, PC vulnerabilities, Redline, Windows source code

  Chinese PC Maker Ships PCs Customized for Malware. In a highly embarrassing incident for Acemagic, a Chinese PC manufacturer, a number of its products have been shipped with numerous vulnerabilities. When setting up a brand-new PC out of the box, you would...

VexTrio Uses 70,000 Hijacked Websites to Spread Malware

by Ophtek, LLC | Mar 26, 2024 | ClearFake, Hijacked websites, Malicious traffic distribution system, malvertising, malware, Ophtek, Phishing, SocGholish, TDS, VixTrio

  VexTrio Uses 70,000 Hijacked Websites to Spread Malware. Threat actors have compromised 70,000 previously legitimate websites and created a powerful network capable of distributing malware. Named VexTrio, this network of compromised websites appears to have...

HeadCrab Attacks Servers with Advanced Malware

by Ophtek, LLC | Mar 19, 2024 | authentication, Hackers, HeadCrab, malware, Ophtek, Redis Servers, runtime monitoring, security scans

  HeadCrab Attacks Servers with Advanced Malware. A new strain of malware, which contains several different attack methods and is considered a severe threat, has been discovered and named HeadCrab. The attack focuses its efforts on Redis servers, an open source,...