SentinelLabs stories

FlexibleFerret malware evades Apple's XProtect updates
Last week
#
malware
#
cybersecurity
#
personal computing devices
SentinelLabs has revealed that new variants of North Korean FERRET malware, dubbed FlexibleFerret, evade Apple's XProtect, targeting macOS users through job interview scams.

Phishing campaign targets X accounts for crypto scams
This month
#
malware
#
cryptocurrency
#
blockchain
Researchers at SentinelLabs have uncovered an active phishing campaign targeting high-profile X accounts to hijack credentials for cryptocurrency scams.

Chinese cyberespionage targets European IT service firms
Wed, 18th Dec 2024
#
malware
#
advanced persistent threat protection
#
cybersecurity
A new cyberespionage campaign, named 'Operation Digital Eye', has emerged, targeting IT service providers in Southern Europe to infiltrate digital supply chains.

Chinese espionage targets European IT providers in new wave
Thu, 12th Dec 2024
#
malware
#
advanced persistent threat protection
#
cybersecurity
A new report reveals 'Operation Digital Eye', a Chinese cyberespionage campaign targeting Southern Europe's IT service providers, heightening security concerns.

SentinelLabs uncovers CyberVolk hacktivist operations
Wed, 27th Nov 2024
#
malware
#
ransomware
#
advanced persistent threat protection
SentinelLabs has unveiled a report on CyberVolk, detailing the hacktivist group's ransomware activities and connections within the cybercrime ecosystem.

North Korean operatives exposed in global tech job scam
Fri, 22nd Nov 2024
#
malware
#
cryptocurrency
#
blockchain
SentinelLabs reveals North Korean operatives are masquerading as foreign IT professionals to infiltrate global tech markets and bypass sanctions.

Cloud ransomware threats rise, targeting S3 & Azure
Tue, 19th Nov 2024
#
ransomware
#
encryption
#
cloud security
A recent SentinelLabs report reveals rising ransomware threats targeting cloud storage, urging firms to enhance security measures against evolving attacks.

North Korean hackers target cryptocurrency with malware
Fri, 8th Nov 2024
#
malware
#
cryptocurrency
#
blockchain
SentinelLabs has uncovered a new cyber campaign by North Korean group BlueNoroff, targeting cryptocurrency firms with multi-stage malware.

New cloud hacktool Xeon Sender exploits APIs for spam SMS
Thu, 22nd Aug 2024
#
cloud services
#
sentinelone
#
twilio
SentinelLabs has detected Xeon Sender, a new tool exploiting APIs to execute large-scale SMS spam attacks. The tool targets services like Amazon SNS and Twilio using legitimate credentials.

SentinelOne & Intezer collaborate on decoding Rust malware
Wed, 14th Aug 2024
#
cybersecurity
#
cyber attacks
#
sentinelone
SentinelOne and Intezer launch Project 0xA11C to unravel Rust malware at Black Hat 2024, providing open-source tools to tackle this complex threat.

SentinelOne & Intezer join forces to tackle Rust malware
Thu, 8th Aug 2024
#
malware
#
cybersecurity
#
sentinelone
SentinelOne and Intezer have teamed up to tackle the complexities of Rust malware, unveiling Project 0xA11C at Black Hat 2024 to aid cybersecurity efforts.

Resurgent Transparent Tribe deploys new Android spyware
Wed, 10th Jul 2024
#
gaming
#
digital entertainment
#
spyware
SentinelLabs reveals new findings on Transparent Tribe's resurgence, detailing four new Android spyware apps targeting Indian government and military personnel.

SentinelLabs report exposes ransomware strategy of APT groups
Thu, 27th Jun 2024
#
ransomware
#
cybersecurity
#
government
SentinelLabs' latest report exposes how cyberespionage groups, including the Chinese APT group ChamelGang, are strategically using ransomware for disruption and misattribution.

Advanced malware AcidPour disrupts Ukrainian telecoms amid Russian invasion
Wed, 27th Mar 2024
#
malware
#
cybersecurity
#
telecom
New research by SentinelLabs reveals AcidPour, a destructive wiper malware linked to the Russian military intelligence, disrupting Ukrainian telecom networks amidst ongoing cyber conflict.

Doppelgänger: Russia's suspected influence operation targets Germany
Wed, 28th Feb 2024
#
twitter
#
sentinel technologies
#
sentinellabs
Doppelgänger, a suspected Russian influence operation targeting global audiences, has been under the watch of SentinelLabs and ClearSky Cyber Security since late 2023.

Smishing scam utilising Amazon Web Services uncovered
Thu, 22nd Feb 2024
#
martech
#
cybersecurity
#
software development
SNS Sender uses Amazon's cloud services for 'smishing' scams, impersonating USPS notifications, according to cybersecurity firm SentinelLabs.

China's hacking accusations against West lack substantial proof, says SentinelOne
Wed, 14th Feb 2024
#
cybersecurity
#
hacking
#
sentinelone
SentinelOne's investigation refutes China's allegations of Western hacking, highlighting a lack of substantial proof and noting China's use of recycled details from leaked US documents.

ScarCruft's evolving tactics analysed by SentinelLabs
Tue, 23rd Jan 2024
#
malware
#
devops
#
apm
Suspected North Korean threat group ScarCruft is reportedly targeting South Korean entities and experts on North Korean affairs, reveals a new study.

Rise in Drainer-as-a-Service attacks lead to high-profile breaches
Fri, 19th Jan 2024
#
endpoint protection
#
mfa
#
cryptocurrency
The rise in Drainer-as-a-Service (DaaS) cyber crimes indicates growing threats to social media accounts and cryptocurrency safety, including high-profile breaches.

SentinelLabs exposes FBot malware targeting cloud, payment services
Mon, 15th Jan 2024
#
saas
#
hyperscale
#
public cloud
SentinelLabs details FBot, a distinct Python-based malware tool, focused on cloud and payment services. Unlike peers, FBot doesn't use Androxgh0st code.