| OpenText Cybersecurity Community

Skip to main content

Customer Support Customer Support

Events
Leaderboard
Customer Support

Create topic
Login

OpenText Core Endpoint Backup

Protect endpoint data, anywhere

Datasheets and Infographics

Access detailed datasheets and infographics for insights on product features

Whitepaper

5 Security tips for protecting Endpoint Backup

Videos

Learn how Endpoint Backup is a solution for all your Endpoint Device

Ask a product question

Ask product-related questions and get answers from our community experts

Threat Intel Hub

Stay updated with the latest threat intelligence and cybersecurity insights

Request a demo and learn more

Have our experts explain how Endpoint Backup can work for your business

Latest Articles

Venmo Users Targeted By Financial Scammers

8 hours ago

144

News

Cyber News Rundown: Port of Seattle reveals 90,000 individuals affected by ransomware

C

2 days ago

163

News

Cyber News Rundown: Crocodilus Android malware targets cryptocurrency wallets

C

13 days ago

294

Threat Reports

REPORT

Nastiest Malware 2024

5 months ago

12707

REPORT

2024 threat hunter perspectives: Key insights from OpenText’s latest report

6 months ago

1124

Report

Key Insights from the OpenText 2024 Threat Perspective

11 months ago

11983

Nastiest Malware

Nastiest Malware 2023

1 year ago

474016

Recently active

TripleHelixModerator

posted in Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

3740738

2 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Entertainment services giant Legends International discloses data breach

April 17, 2025 By Bill Toulas Entertainment venue management firm Legends International warns it suffered a data breach in November 2024, which has impacted employees and people who visited venues under its management. In a notification letter shared with the authorities, the company informs that it detected unauthorized activity in its IT systems on November 9, 2024, prompting an investigation carried out with the help of external cybersecurity experts. The investigation results confirmed that the intruders had exfiltrated personal data files, though the exposed data types aren’t determined in the sample letter. Legends International is a global sports and entertainment services company offering venue planning, sales, partnerships, hospitality, merchandise, and technology solutions, with an annual revenue of over $1.1 billion. It manages over 350 venues across five continents, including the SoFi Stadium in Los Angeles, One World Observatory in New York, the AT&T Stadium in Texas, the

30

5 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

China-linked APT Mustang Panda upgrades tools in its arsenal

April 17, 2025 By Pierluigi Paganini China-linked APT group Mustang Panda deployed a new custom backdoor, MQsTTang, in recent attacks targeting Europe, Asia, and Australia. China-linked APT group Mustang Panda (aka Camaro Dragon, RedDelta or Bronze President). deployed a new custom backdoor, tracked as MQsTTang, in recent attacks targeting entities in Europe, Asia, and Australia. Mustang Panda has been active since at least 2012, targeting American and European entities such as government organizations, think tanks, NGOs, and even Catholic organizations at the Vatican. Past campaigns were focused on Asian countries, including Taiwan, Hong Kong, Mongolia, Tibet, and Myanmar. In the 2022 campaigns, threat actors used European Union reports on the conflict in Ukraine and Ukrainian government reports as lures. Upon opening the reports, the infection process starts leading to the deployment of malware on the victim’s system. >>Full Article<<

30

6 hours ago

Jasper_The_RasperModerator

posted in Ransomware Spotlight

CrazyHunter Hacker Group Using Open-Source Tools from GitHub to Attack Organizations

April 17, 2025 By Tushar Subhra Dutta A sophisticated ransomware group known as CrazyHunter has emerged as a significant threat to organizations, particularly those in Taiwan’s critical infrastructure sectors. This newly identified threat actor has been conducting targeted attacks against healthcare facilities, educational institutions, and industrial organizations since early 2025, showcasing a concerning level of operational sophistication. The campaign leverages readily available open-source tools from GitHub, significantly lowering the barrier to entry for conducting complex ransomware operations. >>Full Article<<

20

6 hours ago

Jasper_The_RasperModerator

posted in Vulnerability Vault

Critical Erlang/OTP SSH Flaw Exposes Many Devices to Remote Hacking

Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP SSH. April 17, 2025 By Eduard Kovacs Many devices could be exposed to complete takeover due to a critical vulnerability discovered recently in the Erlang/OTP SSH library. Erlang/OTP is a collection of libraries, middleware and other tools designed for creating scalable soft real-time systems that require high availability, such as e-commerce, banking, and communications applications. A team of researchers from Ruhr University Bochum in Germany discovered that Erlang/OTP’s SSH implementation is affected by a critical vulnerability for which they calculated a CVSS score of 10. Tracked as CVE-2025-32433, the flaw is related to the SSH protocol message handling, which “allows an attacker to send connection protocol messages prior to authentication”. >>Full Article<<

20

6 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

GPS Spoofing Attacks Spike in Middle East, Southeast Asia

An Indian disaster-relief flight delivering aid is the latest air-traffic incident, as attacks increase in the Middle East and Myanmar and along the India-Pakistan border. April 17, 2025 By Robert Lemos Spoofing attacks on the global positioning system (GPS) continue to widely impact air and sea transportation in 2025, following a significant surge during the summer of 2024, when airline flights suffered frequent jamming in conflict zones, especially in Eastern Europe and Russia, the Middle East, and most recently Myanmar and Southeast Asia. Last week, the Indian military revealed that flights bringing humanitarian aid to Myanamar in the wake of a strong March 28 earthquake had encountered GPS spoofing and had to use backup systems to navigate. A year ago, the number of flights affected by GPS spoofing peaked at more than 1,500 per day in the Middle East alone and to more than 2,000 worldwide. Since then, GPS spoofing attacks have declined significantly, only to pick up at the end of l

30

7 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Node.js malvertising campaign targets crypto users

April 17, 2025 By Pierluigi Paganini Microsoft warns of a malvertising campaign using Node.js to deliver info-stealing malware via fake crypto trading sites like Binance and TradingView. Microsoft has observed Node.js increasingly used in malware campaigns since October 2024, including an ongoing crypto-themed malvertising attack as of April 2025. Threat actors are increasingly using Node.js to deploy malware, shifting from traditional scripts like Python or PHP. Node.js allows attackers to blend malicious code with legitimate apps, bypass security tools, and persist in systems. Node.js is an open-source, cross-platform JavaScript runtime environment that allows JavaScript code to run outside of a web browser. Though less common today, Node.js-based threats are becoming a notable part of the evolving attack landscape. In April Node.js attacks, threat actors use malvertising to lure users to fake sites offering malicious installers disguised as legitimate software. Once executed, the in

30

7 hours ago

J

JayM90Fresh Face

asked in Got a Question?

No longer can see the option to scan files when right clicking on them

As the title says. As of updating my webroot subscription and keycode from Bestbuy, I can no longer right click a file and click “Scan with Webroot” option. I can still scan normally using webroot, but that option is gone. I tried going to bestbuy geeksquad online for direct support, but they swear this feature was never there, when I know it was there. Any advice.

11910

7 hours ago

Jasper_The_RasperModerator

posted in Security Industry News

Chrome extensions with 6 million installs have hidden tracking code

April 17, 2025 By Bill Toulas A set of 57 Chrome extensions with 6,000,000 users have been discovered with very risky capabilities, such as monitoring browsing behavior, accessing cookies for domains, and potentially executing remote scripts. These extensions are 'hidden,' meaning they don't show up on Chrome Web Store searches, nor do search engines index them, and can only be installed if the user has the direct URL. Typically, such extensions are private software like internal company tools or add-ons still under development. Still, threat actors might be using them to evade detection while aggressively pushing them through ads and malicious sites. Risky Chrome extensions The extensions were discovered by Secure Annex researcher John Tuckner, who uncovered the first 35 after examining what he claims is a suspicious extension named 'Fire Shield Extension Protection.' The extension is heavily obfuscated and contains callbacks to an API for sending information collected from the browse

40

7 hours ago

TroyGIllCommunity Manager

published in Phish Tank

Venmo Users Targeted By Financial Scammers

Venmo has become a ubiquitous platform in recent years, reportedly approaching one hundred million users. As one of the leading P2P digital payment apps, its popularity presents a significant target for threat actors. Consequently, we anticipate an increase in attacks aimed at deceiving unsuspecting users. While Venmo's security measures are evolving, users must stay vigilant against scams and phishing attempts. In 2024 alone, consumers reported losing over $12.5 billion to various scams. Educating users on safe practices, such as verifying payment requests and avoiding sharing sensitive information, is crucial in mitigating risks. One recent email phishing attack targeting Venmo users stated a bank associated with the recipient’s account had been removed. The emails contained a link to review recent activity. Of course, the link did not direct to the Venmo site and the address the message was sent from was not an official Venmo address. The threat actor instead relied upon the ‘Displa

144

7 hours ago

Events calendar

May

7

Webinar

2025 OpenText Cybersecurity Threat Report - understanding the cyber threats facing SMB’s

May

7

Webinar

2025 OpenText Cybersecurity Threat Report - understanding the cyber threats facing SMB’s

Leaderboard

1

Jasper_The_Rasper

646 points

2

TripleHelix

410 points

3

ProTruckDriver

206 points

4

Ssherjj

81 points

5

DanP

43 points

Show full leaderboard

1

Jasper_The_Rasper

198404 points

2

TripleHelix

142478 points

3

ProTruckDriver

69488 points

4

Ssherjj

32997 points

5

TylerM

25229 points

Show full leaderboard

Join the Conversation

Tweets by OpenTextSec

Powered by Gainsight

Terms & Conditions

Cybersecurity Solutions OpenText Cybersecurity 2024 Threat Report Cyber Resilience Program

Privacy Policy Cookie Policy Cookies Preferences

LinkedIn Twitter YouTube

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK