New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
|

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

In the ever-evolving landscape of cybersecurity, threat actors are constantly on the lookout for innovative methods to bypass security protocols and exploit vulnerabilities. One such method has been observed in a new malware campaign, codenamed SERPENTINE#CLOUD by Securonix. This campaign employs Cloudflare Tunnel subdomains to host malicious payloads and deliver them via phishing chains. In…

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign
|

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

In a rapidly evolving digital landscape, cybersecurity threats continue to grow in complexity and sophistication. A recent revelation by Google’s Threat Intelligence Group (GTIG) and the Citizen Lab has shed light on a new threat actor campaign linked to the notorious Russian state-sponsored hacking group APT29. This campaign exploits Google’s application-specific passwords (ASPs) to bypass…