Cyberattackers are targeting Linux SSH servers with ShellBot malware. Utilising hexadecimal IP addresses, the perpetrators can evade detection in most URL-based detection signatures. ShellBot leverages weak SSH credentials to compromise servers, subsequently initiating DDoS attacks or deploying payloads like cryptominers on infected machines. Administrators are urged to maintain strong passwords and regularly update credentials to mitigate the threat.
Hackers using fake Ledger Live app to steal seed phrases and drain crypto
Cybercriminals are using fake Ledger Live apps to steal macOS users’ cryptocurrency by replacing the legitimate app with malware that prompts users to input their