-Reports on Nnice, HellCat, and Morpheus ransomware
-J-magic backdoor targets Juniper devices
-AceCryptor adoption goes down
-Sandworm resumes wiper attacks
-Sichuan Juxinhe profile (image)
-Cloudflare CDN vulnerability allows data center tracking
-Oracle, Jenkins, and Cisco security updates

Then on September 23, 2024 more than 1,600 endpoints of small businesses in Czechia 🇨🇿 received emails whose attachments contained an AceCryptor binary packing the #XWorm RAT 🪱🐀. As a C&C, XWorm RAT used easynation[.]duckdns[.]org. 6/7

Instead of the documents, the archive contained an AceCryptor executable packing the Racoon Stealer successor #RecordBreaker, which then exfiltrated the victim information to a C&C server with the IP address of 45[.]153[.]231[.]163. 5/7

As for the malware families packed by the cryptor, we could yet again see the usual suspects such as #Rescoms, #Smokeloader, and #Stealc among the most delivered threats. 3/7

Similarly, the number of unique users targeted by AceCryptor campaigns decreased by 58% between H1 and H2 2024, and the decrease was even more pronounced when compared to H2 2023, amounting to 85%. 2/7

#ESETResearch’s monitoring of #AceCryptor revealed a significant decrease in prevalence of the malware in H2 2024: we only observed around 3k unique samples as opposed to 13k in H1 2024. Overall hits went down by 68% compared to H1, and by 87% compared to H2 2023. 🧵 1/7

AceCryptor malware has surged in Europe, researchers say

Кіберфахівці назвали країну, яка найбільше страждає від потужних хакерських атак.
#новини #uazmi #україна
Фахівці ESET виявили значне зростання атак із використанням шифрувальника AceCryptor у другому півріччі 2023 року.

Hacker greifen mit verschleierter Schadsoftware Unternehmen in ganz Europa an.

www.mimikama.org/europa-im-vi...

L’ascesa degli attacchi AceCryptor in Europa: Esploriamo il significativo aumento degli attacchi malware confezionati con AceCryptor nella seconda metà del 2023. Nel corso della seconda metà del 2023, l’Europa ha assistito a un notevole incremento di attacchi informatici, con un protagonista in…

AceCryptor e Rescoms: Analisi delle Campagne Spam: Scopri l’analisi dettagliata delle campagne spam di AceCryptor e dell’attività di Rescoms in Europa nel secondo semestre 2023. Recenti analisi condotte dal settore della cyber security hanno rivelato una crescita preoccupante delle attività di spam…

AceCryptor malware has surged in Europe, researchers say #cybersecurity #infosec #privacy #news therecord.media/acec...

Thousands of new infections involving the AceCryptor tool have been discovered as part of a campaign targeting organizations across Europe according to ESET
therecord.media/acecryptor-m...

Resurgimiento de AceCryptor: Rescoms se sube a la ola y comienza a usarlo en campañas de spam

Vía: @ESETLA

www.welivesecurity.com/es/investiga...