Cybersecurity Brief – 2025-04-12

Sat, 12 Apr 2025 00:00:00 +0000

Phishing Campaign Targeting QuickBooks Users:
- Cybercriminals are targeting QuickBooks users with phishing campaigns during tax season.
Threat Actors Retain Access to FortiGate Devices Post-Patching:
- Fortinet warns that threat actors can maintain read-only access to FortiGate devices even after initial access vectors are patched.
PowerModul Implant Targeting Russian Sectors:
- The threat actor Paper Werewolf has deployed a new implant called PowerModul to target Russian entities.
Brute-Force Attempts Against PAN-OS GlobalProtect Gateways:
- Palo Alto Networks has observed brute-force login attempts targeting PAN-OS GlobalProtect gateways.
SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users:
- Cybersecurity researchers have discovered malware targeting Android and iOS users through fake apps.
Microsoft Defender to Isolate Undiscovered Endpoints:
- Microsoft is testing a new Defender for Endpoint capability to block attacks by isolating undiscovered endpoints.
Western Sydney University Discloses Security Breaches:
- WSU has reported security incidents exposing personal information of community members.
Ransomware Attack Cost IKEA Operator $23 Million:
- Fourlis Group, the operator of IKEA stores in Eastern Europe, suffered a ransomware attack causing significant losses.
Code of Practice for States Signed to Curb Commercial Spyware:
- Nations are signing the Code of Practice for States to address commercial spyware threats.
Goffee Targeting Russian Organizations with New Malware:
- The threat actor Goffee, also known as Paper Werewolf, is targeting Russian organizations with new malware targeting flash drives.

Paper Werewolf on DanSec Daily

Cybersecurity Brief – 2025-04-12