Malware

Linux backdoor CWPdoor hides in trojanized CWP panel server cwpsrv and suppresses access logs

QiAnXin XLab says it captured a suspicious script, cwpsrv_update.

Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.

BleepingComputer reports that Russian cloud and hosting provider Beget said an attacker gained access to the management systems of its entire architecture on the night of Nov 1 and deployed malware that erased server data, after which Beget disconnected all servers .

According to INTERNET Watch, Japan's Daiichi Kosho announced on October 8 that a PC of an employee at Nippon Columbia Group, which handles personal data on its behalf, was infected with malware on October 1-2, putting names, gender, birth dates, emails and phones of about 8,724,000 Big Echo and other store members and staff at risk, without passwords .

According to The Korea Herald, an investigation revealed that KT servers had been infected with malware and that the company failed to promptly notify regulatory authorities .

Cybersecurity media outlets reported that multiple Ukrainian internet service providers (ISPs) were hit by cyberattacks causing connectivity disruptions .

On 2024-01-16, the FBI and CISA released a joint cybersecurity advisory detailing indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with Androxgh0st malware .