Displaying items by tag: digiALERT

Artificial Intelligence (AI) is reshaping the way the world works. Whether it’s automating repetitive tasks, assisting in decision-making, or enhancing productivity, AI-powered tools are now a staple in most organizations. In fact, a staggering 74% of businesses use AI tools daily, according to a recent industry study.

Ransomware has morphed from a fringe cybersecurity nuisance into one of the most disruptive and costly forms of cybercrime facing individuals, businesses, and governments worldwide. In 2024, ransomware payments exceeded $1.1 billion, according to Chainalysis—a chilling all-time high. But that’s just the beginning. These figures do not include the far more substantial costs of downtime, forensic investigations, legal consultations, reputational damage, and regulatory fines, which often outstrip the ransom itself. 

Cloud-native technologies like Docker have revolutionized how modern enterprises deploy applications—but they’ve also opened new doors for attackers. In recent months, cybersecurity researchers have uncovered an alarming surge in attacks targeting misconfigured Docker API instances, turning them into nodes in massive, resource-hijacking botnets designed to mine cryptocurrencies like Dero and Monero.

In an increasingly digital world where rapid application development is paramount, developers heavily rely on open-source package ecosystems like npm (Node Package Manager) to streamline their workflow. These repositories promise speed, collaboration, and innovation—but they also introduce a critical and often overlooked threat vector: supply chain attacks.

Did you know that over 60% of malware infections originate from disguised software installers? Cybercriminals are becoming more strategic than ever, packaging malware in what appears to be legitimate software to gain user trust. In one of the latest campaigns uncovered by cybersecurity firm Rapid7, attackers are targeting Chinese-speaking users by distributing fake versions of widely used applications like LetsVPN and QQ Browser.

The cybersecurity landscape is rapidly evolving, and the latest wave of attacks illustrates just how critical and vulnerable our development environments have become. A massive campaign involving more than 4,800 IP addresses has recently been uncovered, with cybercriminals targeting misconfigured Git directories—specifically the .git/config files commonly found in software development setups.

The digital threat landscape in 2025 is becoming increasingly hostile. Among the most alarming developments is the 400% surge in PureRAT activity—an aggressive comeback of a once under-the-radar Remote Access Trojan (RAT). According to aggregated data from global threat intelligence firms and Digialert's internal telemetry, PureRAT infections have skyrocketed, signaling a new wave of cyberattacks that businesses cannot afford to ignore.

A new breed of cyber attackers—led by a threat group known as Hazy Hawk—is capitalizing on these misconfigurations to redirect users to scam sites, phishing pages, and malware. The attack method is deceptively simple, but the impact can be devastating—especially when trusted domains belonging to governments, enterprises, and academic institutions are weaponized against the public.

In today’s hyper-connected digital ecosystem, businesses are more agile, innovative, and efficient than ever before. But this evolution comes at a steep price: supply chain cyberattacks are escalating in both frequency and sophistication. The very tools and vendors you trust to run your business could be the entry point for malicious actors.

The cyber threat landscape never sleeps—and neither do the adversaries behind it. In an era where most botnets are Linux-based and heavily target IoT devices, a new breed of malware has emerged, shifting the paradigm of distributed denial-of-service (DDoS) attacks. Known as HTTPBot, this new Windows-based botnet is engineered with precision and built to disrupt operations where it hurts most: in high-value, real-time digital interfaces.