Skip To Main Content
Common SecurityLog on Muck Rack

Common SecurityLog

As seen in: Malware.News
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Common SecurityLog’s profile

Articles by Common SecurityLog

Threat actors misuse Node.js to deliver malware and other malicious payloads

|
By Device ProcessEvents, Behavior Entities, Common SecurityLog, Device NetworkEvents
| microsoft.com
Since October 2024, Microsoft Defender Experts (DEX) has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to information theft and data exfiltration. While traditional scripting languages like Python, PHP, and AutoIT remain widely used in threats, threat actors are now leveraging compiled JavaScript—or even running the scripts directly in the command line using Node.js—to facilitate malicious activity.
Open in Who Shared View Duplicates (2) Issue with article?

Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage

|
By project Timestamp, Timestamp desc, Behavior Entities, Common SecurityLog
| microsoft.com
Based on both Microsoft Threat Intelligence’s findings and those reported by governments and other security vendors, we assess that the Russian nation-state actor tracked as Secret Blizzard has used the tools and infrastructure of at least six other threat actors during the past seven years. They also have actively targeted infrastructure where other threat actors have staged exfiltrated data from victims with the intention of collecting this data for their own espionage program.
Open in Who Shared Issue with article?
Show More