North Korea-linked Andariel APT Group exploited an ActiveX Zero-Day in recent attacks

Haythem Elmir

A North Korea-linked APT group, tracked as  AndarielGroup, leveraged an ActiveX zero-day vulnerability in targeted attacks against South Korean entities. According to a report published by South Korean cyber-security firm AhnLab, the Andariel Group is a division of the dreaded Lazarus APT Group, it  already exploited ActiveX vulnerabilities in past attacks The attackers exploited at […]

Le phishing se déchaîne sur les réseaux sociaux

Haythem Elmir

La fraude ciblant les utilisateurs des réseaux sociaux (ou « angler phishing ») a bondi de 200% en un trimestre, selon Proofpoint. Proofpoint a publié son rapport trimestriel sur les menaces cyber qui pèsent sur les entreprises (Quaterly Threat Report Q1 2018). Le rapport s’appuie sur l’analyse quotidienne de 5 milliards de […]

Tech giants are all working on new Spectre and Meltdown attacks, so-called variant 3 and variant 4

Haythem Elmir

Yesterday AMD, ARM, IBM, Intel, Microsoft and other major tech firms released updates, mitigations and published security advisories for two new variants of Meltdown and Spectre attacks. Spectre and Meltdown made the headlines again, a few days after the disclosure of a new attack technique that allowed a group of researchers to recover data […]