The ransomware strain known as Play is now available to other threat actors as a service, according to cybersecurity company Adlumin. It states that the lack of variations between attacks indicates the ransomware is being sold with a step-by-step execution guide. Play, which uses flaws in Microsoft Exchange Server to infiltrate networks, was previously unique as its developers conducted the attacks, indicating a shift to RaaS (Ransomware as a Service) is a new development.
Botnets leverage decade-old D-Link vulnerabilities in new attack campaigns
A new report from FortiGuard Labs has revealed the activities of two botnets, FICORA and CAPSAICIN, exploiting vulnerabilities in legacy D-Link devices. The report stresses