Financial threat group UAC-0006 is conducting a phishing campaign targeting customers of Ukraine’s largest state-owned bank, PrivatBank, using password-protected archives to deploy SmokeLoader malware. Cybersecurity experts noted overlaps in the group’s tactics with EmpireMonkey and Russia-linked FIN7. The SmokeLoader malware is largely used for data theft, unauthorized access, and financial gain.
Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware
Hackers are exploiting vulnerabilities in SimpleHelp RMM clients to create admin accounts, install backdoors and possibly prepare for ransomware attacks. The cyberattacks, which have been