Apache Spark CI Vulnerability

Overview:   SonicWall Capture Labs Threat Research Team has observed the following threat:   Apache Spark is a unified analytics engine for large-scale data processing. It provides high-level APIs in Java, Scala, Python and R, and an […]

First-Half 2022 Threat Intelligence: Geopolitical Forces Rapidly Reshaping Cyber Frontlines

Cybersecurity and geopolitics have always been inseparably linked, and in the past six months we’ve seen this increasingly play out across the threat landscape. Based on data from the mid-year update to the 2022 SonicWall […]

New Lilith ransomware in early development

The Sonicwall CaptureLabs threat research team has observed reports of the launch of a new ransomware family named Lilith.  Lilith ransomware is written in C/C++ and targets 64-bit Windows machines.  Encrypted files are marked with […]

Oracle MySQL NDB Cluster RCE

Overview:   SonicWall Capture Labs Threat Research Team has observed the following threat:   MySQL is a popular open-source implementation of a relational database that supports the Structured Query Language (SQL) for querying and updating stored data. […]

Known Trojan named AsyncRAT is now going fileless

A VBScript is used by the threat actor to deliver fileless AsyncRAT to the victim’s machine

This post is also available in: Portuguese (Brazil) French German Japanese Korean Spanish