Evilnum is an advanced APT group that has been operating since 2018. However, two years after it first began using them, its tools and methods were discovered. Experts at Zscaler kept an eye on the threat actor’s activities and observed that the gang had increased its arsenal. The group started targeting an international organization involved […]

The threat actor that developed the BRATA banking trojan has enhanced the malware with data-stealing capabilities. mCleafy, an Italian mobile security researcher, has been tracking BRATA activity and has discovered improvements in more recent campaigns that extended persistence on the device. Technical Details Instead of acquiring a list of installed apps and the required injections […]

Microsoft warns of brute force attacks targeting Internet-exposed and poorly secured Microsoft SQL Server (MSSQL) database servers using weak passwords. The attackers are using legitimate sqlps[.]exe tools as a Living-Off-the-Land Binary (LOLBin). They’re executing recon commands and changing the SQL service’s start mode to LocalSystem using the sqlps[.]exe utility (a PowerShell wrapper for running SQL-built […]