VexTrio Uses 70,000 Hijacked Websites to Spread Malware

by Ophtek, LLC | Mar 26, 2024 | ClearFake, Hijacked websites, Malicious traffic distribution system, malvertising, malware, Ophtek, Phishing, SocGholish, TDS, VixTrio

  VexTrio Uses 70,000 Hijacked Websites to Spread Malware. Threat actors have compromised 70,000 previously legitimate websites and created a powerful network capable of distributing malware. Named VexTrio, this network of compromised websites appears to have...

HeadCrab Attacks Servers with Advanced Malware

by Ophtek, LLC | Mar 19, 2024 | authentication, Hackers, HeadCrab, malware, Ophtek, Redis Servers, runtime monitoring, security scans

  HeadCrab Attacks Servers with Advanced Malware. A new strain of malware, which contains several different attack methods and is considered a severe threat, has been discovered and named HeadCrab. The attack focuses its efforts on Redis servers, an open source,...

Spica: New Malware Launched by Russian Hackers

by Ophtek, LLC | Mar 12, 2024 | backdoor malware, ColdRiver, cybersecurity, Ophtek, Phishing, Proton-decryptor.exe, Russian Hackers, Spica

  Spica: New Malware Launched by Russian Hackers. Russian hackers are using a fake PDF decryption tool to trick innocent PC users into downloading Spica, a new strain of malware. Discovered by Google’s Threat Analysis Group (TAG), Spica is a backdoor malware...

The Dangers of Malware on GitHub

by Ophtek, LLC | Mar 5, 2024 | GitHub, malicious code, malware, Open Source Malware, Ophtek

  The Dangers of Malware on GitHub. GitHub is a wildly popular website for developers to create, share, and store their code, but it’s also being increasingly used to spread malware. Launched in 2008, GitHub quickly became the number one destination for...

Bandook Malware Strikes Back 

by Ophtek, LLC | Feb 27, 2024 | anti-malware tools, Bandook Malware, network activity, Ophtek, Phishing Email, Remote Access Trojan

  Bandook Malware Strikes Back. A new variant of the Bandook malware has been discovered which targets Windows PCs, so it’s crucial you know how to deal with it.  From its earliest detection in 2007, Bandook has been a capable strain of malware. Being a remote...

Google Accounts Compromised by Cookie Vulnerability 

by Ophtek, LLC | Feb 20, 2024 | gmail, Google, Google cookies, Hackers, Hacking, multi factor authentication, Ophtek, Suspicious links, suspicious software

  Google Accounts Compromised by Cookie Vulnerability.  Google Accounts Compromised by Cookie Vulnerability.  A recently discovered vulnerability appears to allow threat actors to hack into your Google account, even if you change your password.  Given that there...