Security Bulletin: Fake Reddit Sites and Lumma Stealer

A new campaign distributing the notorious Lumma Stealer malware has been discovered by security analyst Crep1x at Sekoia. Threat actors are utilizing over 80 second-level domains to generate over 1,000 fully qualified domain names impersonating Reddit and WeTransfer. Websites impersonating Reddit feature a fake thread designed to deceive victims into downloading the malware.

Alert Fatigue: The Hidden Risk & How NDR Solves It! #cybersecurity #ndr

Is your security team drowning in alerts? False positives, low-priority warnings, and overwhelming notifications can lead to alert fatigue—causing real threats to slip through the cracks. In this video, we break down: What alert fatigue is and why it’s dangerous. The costly impact on your security operations. How NDR (Network Detection & Response) leverages AI and behavioral analysis to filter out noise and highlight real threats. Why Fidelis Network helps your team focus on what really matters.

Using MITRE ATT&CK for Incident Response Playbooks

A structured approach to incident response enables you to create consistently repeatable processes. Your incident response playbook defines responsibilities and guides your security team through a list of activities to reduce uncertainty if or when an incident occurs. MITRE ATT&CK Framework outlines the tactics and techniques that threat actors use during different stages of an attack.

An Overview of the MGM Cyber Attack

If you have ever been to a Las Vegas casino, then you know that they are literally money-making machines as people bet money on a variety of games on a continuous basis. Modern casinos exemplify digitally transformed businesses, with customers engaging through multiple digital channels, from gaming systems to mobile apps and loyalty programs.

Telegram Abused as C2 Channel for New Golang Backdoor

As part of Netskope Threat Labs hunting activities, we came across an IoC being shared by other researchers and decided to take a closer look at it. During the analysis, we discovered that the payload was apparently still under development, but is already fully functional. The malware acts like a backdoor and uses Telegram as its command and control (C2) channel.

Mastering PowerShell Sleep for Script Management

The Start-Sleep cmdlet in PowerShell pauses the execution of a script and waits for a specified amount of time. Strategically using pauses can help ensure smooth functionality and prevent errors, especially in scripts that depend on external systems or events. Here are three of the top reasons you might need to use a PowerShell pause command.