November 2021

Emotet Resurgence: TrickBot Delivers the Loader Back

Post author:Prabhu Kalyan Samal
Post published:November 25, 2021
Post category:Ransomware & Malware Security

Ten months after its takedown, Emotet returned via a TrickBot module. The lesson: criminal franchises rebuild through partners.

Fake FBI Warnings: The 2021 fbi.gov Email Spoofing

Post author:Prabhu Kalyan Samal
Post published:November 18, 2021
Post category:Identity & Phishing Security

Attackers abused a misconfigured FBI notification system to spam fake cyber-warnings from the real fbi.gov address, exposing the limits of email trust.

GoDaddy Breach: One Phished Password, 1.2 Million Sites Exposed

Post author:Prabhu Kalyan Samal
Post published:November 16, 2021
Post category:Cloud & Infrastructure Security Supply Chain Security

Two months of undetected access to managed WordPress hosting, wholesale sFTP and database credential harvesting, and SSL keys in the bargain.

npm Hijacking Wave: coa, rc, node-ipc and Stolen Maintainers

Post author:Prabhu Kalyan Samal
Post published:November 11, 2021
Post category:Security Supply Chain Security

Popular packages with dormant maintainers pushed info-stealers through postinstall scripts. The registry was fine; the accounts were not.