Tag: insecure updates

1 Attack Reports | 0 Vulnerabilities

Attack reports

StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

Volexity detected and responded to multiple incidents involving systems infected with malware linked to StormBamboo, a threat actor known for compromising internet service providers (ISPs) and leveraging DNS poisoning to redirect software update traffic to attacker-controlled servers hosting malici…
malware
dazzlespy
macma
2024-08-05
reloadext
dns poisoning
osx.cdds
pocostick
insecure updates
Published: August 5, 2024
Downloadable IOCs: 2
Click here to see more Attack Reports