news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Asia
- Business Services
- Handala
- Data Encrypted For Impact
- Middle East
- Jobinfo
- Israel
- Shelter Locations In Israel
- Retail
- Cyber Fattah Team
- Saudi Games
- Saudi Arabia
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Kibbutz Almog
- Government
- Manufacturing
- Saban Brands Israel
- Digitalghost
- Mprest
- Evil_Byte
- The Knesset
- Gonjeshke Darande
- Nobitex
- Sentap
- exclusive
- Chemicals And Allied Products
- Kimia Farma
- South-Eastern Asia
- Indonesia
- Scania
- Europe
- Hensi
- Northern Europe
- Transportation
- Sweden
- Tbn Israel
- Media
- Weizmann Institute Of Science
- Education
- Resistancetrench
- Israeli Air Force
- Dienet
- Israel Antiquities Authority
- Mirai
- Cve-2025-24016
- North America
- CVE-2025-24016
- United States
- Wazuh
- Epsilor Electric Fuel
- Technology
- Clayoxtymus1337
- Southern Asia
- Advanced Weapons And Equipment India
- India
- More_Eggs
- Fin6
- Alex Lab
- Cryptocurrency
- Edf Energy
- Zoldyck
- United Kingdom
- Critical Infrastructures
- Spearphishing Link
- Amos
- Unix Shell
- Telecommunications
- Sudo And Sudo Caching
- Ingress Tool Transfer
- Credentials In Files
- Match Legitimate Name Or Location
- Disable Or Modify Tools
- Spectrum
- Israel Defense Forces
- Food And Kindred Products
- Ghna
- Coca-Cola Europacific Partners
- Automotive
- Southern Europe
- Locauto
- Italy
- Whitecoat
- Spain
- Mercadona
- Ups
- Healthcare
- Wow Health Solutions
- Cyprus Airways
- Rip_Real_World
- Netsupport Rat
- Illeak
- Tel Aviv University
- Desec0X
- Unc6032
- Lucky_Gh0$T
- Chaos
- Yashma
- Cyberlock
- Numero
- Deloitte
- 303
- Gucci
- Windows Credential Manager
- Screen Capture
- Credentials From Password Stores
- Credentials From Web Browsers
- Obfuscated Files Or Information
- Input Capture
- Phishing
- Virtualization/Sandbox Evasion
- Password Managers
- Drive-By Compromise
- Exfiltration Over C2 Channel
- User Execution
- Data From Local System
- File And Directory Discovery
- System Information Discovery
- Command And Scripting Interpreter
- Eddiestealer
- Superloop
- W_Tchdogs
- Australia And New Zealand
- Australia
- External Remote Services
- Change Default File Association
- Network Service Discovery
- Smb/Windows Admin Shares
- Docker
- Resource Hijacking
- Web Protocols
- Exploit Public-Facing Application
- Deploy Container
- Remote System Discovery
- Lateral Tool Transfer
- Exploitation For Client Execution
- Escape To Host
- Romania
- Cameleon
- Venom Rat
- Bitdefender
- Financial Theft
- Eastern Europe
- Macao Special Administrative Region
- CVE-2023-20118
- Vicioustrap
- Cve-2023-20118
- Eastern Asia
- Cisco
- Uat-6382
- Cve-2025-0944
- Trimble
- Tetraloader
- CVE-2025-0944
- Regsvr32
- Scheduled Task
- China
- Process Discovery
- Dynamic-Link Library Injection
- Valleyrat
- Masquerade Task Or Service
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Reflective Code Loading
- Rundll32
- Malicious File
- Silver Fox
- File Deletion
- Powershell
- Danabot
- Bumblebee
- Trickbot
- Warmcookie
- Qakbot
- Cetus
- Purehvnc
- Bytebreaker
- Telcel
- Latin America And The Caribbean
- Mexico
- Viralgod
- Peter Green Chilled
- Cellcom
-
May 28, 2025
New Malicious Campaign Exploits Fake Antivirus Website to Distribute Venom RAT
Cybersecurity researchers have uncovered a malicious campaign that utilizes a fraudulent website masquerading as Bitdefender's antivirus software to distribute a remote access trojan known as Venom RAT. The site, bitdefender-download[.]com, tricks users into downloading a zip file containing malware disguised as an installer. This campaign aims to compromise victims' credentials and crypto wallets, highlighting a trend of sophisticated, modular malware that leverages open-source components for more effective attacks.
