Blog
-
Velociraptor leveraged in ransomware attacks
Ransomware operators are using Velociraptor, an open-source digital forensics tool, in their attacks. The activity is attributed to Storm-2603, a…
-
APT Meets GPT: Targeted Operations with Untamed LLMs
Over the course of three months, Volexity observed UTA0388 using various themes and fictional identities across dozens of spear phishing…
-
Oracle EBusiness Suite CVE202561882 Malware Analysis
A critical vulnerability in Oracle E-Business Suite (CVE-2025-61882) is being actively exploited. The attack involves dropping malicious template files through…
-
SelfPropagating Malware Spreading Via WhatsApp, Targets Brazilian Users
SORVEPOTEL has been observed to spread across Windows systems through convincing phishing messages with malicious ZIP file attachments. Interestingly, the…
-
SelfPropagating Malware Spreading Via WhatsApp, Targets Brazilian Users | Trend Micro (US)
SORVEPOTEL has been observed to spread across Windows systems through convincing phishing messages with malicious ZIP file attachments. Interestingly, the…
-
XWorm V6: Exploring Pivotal Plugins
Since the release of XWorm V6.0 on June 4, 2025, we have noted a surge in samples identified as XWorm…
-
SecuritySnack: 18+ECrime
A financially motivated cybercrime operation has been identified, targeting users with over 80 spoofed domain names and lure websites. The…
-
Oracle Security Alert Advisory CVE202561882
A critical security vulnerability (CVE-2025-61882) has been identified in Oracle E-Business Suite versions 12.2.3-12.2.14. This flaw is remotely exploitable without…
-
Oracle Security Alert Advisory CVE202561882
A critical security vulnerability (CVE-2025-61882) has been identified in Oracle E-Business Suite versions 12.2.3-12.2.14. This flaw is remotely exploitable without…
-
Addressing the CL0P Extortion Campaign Targeting Oracle E-Business Suite (EBS) Users
Addressing the CL0P Extortion Campaign Targeting Oracle E-Business Suite (EBS) Users====================================================================================Written ByCybereason Consulting Team *Cybereason is continuing to investigate. Check…