Weekly Threat Digest: December 02 – December 08, 2024

For a detailed threat digest, download the PDF file here

Summary

HiveForce Labs has recently made significant advancements in identifying cybersecurity threats. Over the past week, detected seven attacks, reported seven vulnerabilities, and identified three active adversaries. These findings underscore the relentless and escalating danger of cyber intrusions.

Additionally, SmokeLoader malware targets Taiwanese organizations, acting as both an initial access vector and an operational threat by fetching plugins from its C2 server.

Furthermore, this week, Venom Spider offers Malware-as-a-Service (MaaS) tools, with campaigns between August and October 2024 deploying RevC2 and Venom Loader to steal sensitive data and enable remote code execution. Zyxel firewalls face a critical CVE-2024-11667 vulnerability, exploited to deploy Helldown ransomware via directory traversal in the web interface. These rising threats pose significant and immediate dangers to users worldwide.

Subscribe to receive our weekly threat digests and newsletters directly in your inbox.