Hackers Use Rogue VMs to Evade Detection in Recent MITRE Cyberattack

Hackers Use Rogue VMs to Evade Detection in Recent MITRE Cyberattack

MITRE Corporation announced that a cyberattack on a nonprofit in late December 2023 exploited zero-day vulnerabilities in Ivanti Connect Secure (ICS) by creating rogue virtual machines (VMs) within its VMware environment. The threat actor, linked to China and tracked by Mandiant as UNC5221, accessed the Networked Experimentation, Research, and Virtualization Environment (NERVE) by exploiting ICS … Read more

New Bifrost Malware Variant Targets Linux Systems, Mimics VMware to Evade Detection

New Bifrost Malware Variant Targets Linux Systems, Mimics VMware to Evade Detection

Security landscape is once again under threat as Palo Alto Networks’ Unit 42 uncovers a new variant of the notorious Bifrost malware, now targeting Linux systems with a cunning twist. This latest iteration employs a deceptive domain, closely mimicking a legitimate VMware site to bypass security measures and compromise unsuspecting users. Insidious Tactics: Typosquatting and … Read more