Jai Vijayan

Naperville

Independent journalist and tech content creation specialist covering data security and privacy, business intelligence, big data and data analytics

Articles

'HoldingHands' Acts Like a Pickpocket With Taiwan Orgs

1 week ago | darkreading.com | Jai Vijayan

A threat actor is targeting organizations in Taiwan in a sophisticated and evolving campaign to steal data for likely use in future attacks. The attackers are delivering malware through phishing emails impersonating Taiwan’s National Taxation Bureau and other government entities, using themes related to taxes, pensions, and public services. Convincing Phishing LuresThe emails contain a malicious zip file that launches a multistage infection chain when opened.
Malicious Chimera Turns Larcenous on Python Index

1 week ago | darkreading.com | Jai Vijayan

A malicious package recently uploaded to the Python Package Index (PyPI) is the latest manifestation of the growing sophistication of software supply chain threats. Security researchers at JFrog recently discovered the multistage attack malware, "chimera-sandbox-extensions," lurking on the repository and have surmised it was most likely targeting organizations using chimera-sandbox for developing and testing code for artificial intelligence.
When Bad Guys Let Their Guard Down

2 weeks ago | darkreading.com | Jai Vijayan

A server memory leak that allowed security researchers to quietly snoop on the recently disrupted DanaBot Russian malware-as-a-service (MaaS) operation for nearly three years has once again shown how much threat actors can sometimes give away when their own security slips.
PoC Code Escalates Roundcube Vuln Threat

2 weeks ago | darkreading.com | Jai Vijayan

The threat associated with a critical decade-old remote code execution vulnerability in Roundcube webmail has increased sharply in recent days, with proof-of-concept (PoC) code for the bug becoming readily available to threat actors. The bug, identified as CVE-2025-49113, has a near maximum CVSS severity score of 9.9 and affects Roundcube versions 1.1.0 through 1.6.10, including several default configurations.
‘Librarian Ghouls’ cyberattackers strike at night

2 weeks ago | threatbeat.com | Jai Vijayan

Skip to content NEW Security news and analysis brought to you by the McCrary Institute | READ MORE → By Jai Vijayan • Jun 10, 2025 A newly uncovered cyber campaign by an advanced persistent threat (APT) group known as “Librarian Ghouls” is targeting organizations in Russia with stealthy nighttime attacks to steal sensitive data and deploy cryptocurrency miners on victim systems.
'Librarian Ghouls' Cyberattackers Strike at Night

2 weeks ago | darkreading.com | Jai Vijayan

A newly uncovered cyber campaign by an advanced persistent threat (APT) group known as "Librarian Ghouls" is targeting organizations in Russia with stealthy nighttime attacks to steal sensitive data and deploy cryptocurrency miners on victim systems. According to Kaspersky researchers tracking the campaign, the initial infection vector involves targeted phishing emails carrying password-protected archive files that contain executable payloads.
Vishing Crew Targets Salesforce Data

3 weeks ago | darkreading.com | Jai Vijayan

Members of a financially motivated threat group are impersonating IT support staff in convincing phone calls and talking employees into granting access to their organization’s Salesforce environments. Over the last several months the threat actor, whom Google's threat intelligence group is tracking at UNC6040, has breached multiple organizations in this fashion and stolen large volumes of data from within their Salesforce platforms with a view to extort them later.
Vishing Crew Targets Salesforce Data

3 weeks ago | darkreading.com | Jai Vijayan

Members of a financially motivated threat group are impersonating IT support staff in convincing phone calls and talking employees into granting access to their organization's Salesforce environments. Over the past several months, the threat actor, whom Google's threat intelligence group is tracking as UNC6040, has breached multiple organizations in this fashion and stolen large volumes of data from within their Salesforce platforms with a view to extort them later.
'Crocodilus' Sharpens Its Teeth on Android Users

3 weeks ago | darkreading.com | Jai Vijayan

A new mobile malware tool that security vendors are tracking as "Crocodilus" is stealthily slithering onto Android devices around the world via fake banking apps, phony browser updates, and malicious ads promising fake rewards. ThreatFabric's mobile threat intelligence team firm spotted Crocodilus in test campaigns in March and shortly after in live campaigns that mainly targeted Android users in Turkey.
Exploitation Risk Grows for Critical Cisco Bug

3 weeks ago | darkreading.com | Jai Vijayan

The risk of attackers exploiting a recently disclosed maximum severity vulnerability in Cisco's IOS XE Wireless Controller software has increased significantly following the public release of detailed technical information about the flaw. The analysis, published on Friday by Horizon3.ai, stopped short of offering proof-of-concept exploit code but still contained enough details for other researchers and threat actors to develop a working exploit.