Weekly Threat Digest: 03 February to 09 February 2025

For a detailed threat digest, download the PDF file here

Summary

HiveForce Labs has identified a surge in cyber threats, with ten attacks executed, one vulnerability uncovered, and an active adversary exposed in the past week alone highlighting the relentless nature of cyberattacks.

HiveForce Labs has uncovered major cybersecurity threats, including an actively exploited zero-day vulnerability in 7-Zip (CVE-2025-0411). This flaw, exploited since September 2024, allows attackers to bypass Windows’ Mark of the Web (MotW) and execute malicious files. Russian cybercriminals have weaponized it in spear-phishing campaigns, using homoglyph attacks to disguise file extensions and deliver SmokeLoader malware.

Meanwhile, North Korean threat actors are targeting macOS users through the “Contagious Interview” campaign, tricking job seekers and developers into installing malware. Additionally, the Lynx Ransomware-as-a-Service (RaaS) operation is growing, using double extortion tactics to encrypt data while threatening leaks. The Kimsuky group continues spear-phishing to spread PebbleDash malware and a custom RDP Wrapper for remote access. These evolving threats underscore the need for heightened vigilance and proactive security defenses.

Subscribe to receive our weekly threat digests and newsletters directly in your inbox.