Symantec Enterprise Cloud Insights: Type-Specific Updates

Symantec Enterprise Cloud Updates by Year and Month

151 Significant Changes from the Last 6 Months

Date Update Type Description View
16-04-2025 Symantec Blocks Phishing Attacks Using NoCodeForm and Submit-Form Service Symantec protects users from phishing campaigns exploiting trusted cloud-based tools like NoCodeForm and Submit-Form to steal credentials. These attacks mimic legitimate login pages, but Symantec’s Email Security.cloud and Messaging Gateway use advanced filtering to stop them. The misuse of web forms highlights the need for robust cloud security measures.
16-04-2025 Symantec Shields Against BPFDoor Linux Backdoor Targeting Asia and Middle East Cybersecurity Symantec’s advanced protection detects and blocks the BPFDoor Linux backdoor, a stealthy malware using Berkeley Packet Filtering to infiltrate networks in Asia and Middle East industries. This backdoor opens reverse shells, risking sensitive data exposure. Symantec’s Carbon Black solutions ensure robust defense against this threat.
16-04-2025 Symantec Blocks DOGE BIG BALLS Ransomware Exploiting Government Efficiency Name Company News Symantec’s robust defenses stop the DOGE BIG BALLS Ransomware, a Fog ransomware variant using a deceptive finance-themed ZIP file to target victims. This attack exploits a government efficiency department’s name and a vulnerable driver to gain system access. Symantec’s adaptive, behavior, and machine learning-based protections ensure comprehensive security. Read the Symantec Protection Bulletin to stay informed and safe.
16-04-2025 Symantec Stops Malicious VSCode Extensions Spreading XMRig Cryptominer Company News Symantec’s advanced security solutions detect and block a new wave of malicious VSCode extensions that disguise themselves as legitimate tools to infect users with the XMRig cryptominer for Monero. These extensions deploy a PowerShell script to disable defenses, gain persistence, and escalate privileges. Symantec’s adaptive and machine learning-based protections ensure robust defense against this cryptojacking threat.
16-04-2025 Symantec Flags Multi-Stage Malspam Attacks Delivering Agent Tesla Variants Company News Symantec has identified a surge in malspam campaigns delivering Agent Tesla through a multi-layered attack chain involving JavaScript and PowerShell scripts. These attacks end with memory-injected payloads targeting legitimate processes. Symantec, alongside VMware Carbon Black, provides strong threat protection through adaptive, behavior-based, and network-level detection. Strengthen your defenses now—use trusted tools like Symantec to block evolving malware threats.
16-04-2025 DragonForce Ransomware Expands Global Reach, Symantec Boosts Protection Feature DragonForce ransomware is targeting over 40 organizations in 2025 across sectors like healthcare, legal, and manufacturing in countries including the USA, UK, Germany, and Australia. Victims face file encryption, data theft, and threats of public leaks if no contact is made. Symantec and VMware Carbon Black provide strong defenses through file-based, adaptive, and machine learning detection tools.
15-04-2025 Snake Keylogger Targets Turkish Firms Posing as İŞKUR: Symantec Blocks Threat Showcase A Snake Keylogger campaign impersonating Turkey’s İŞKUR employment agency targets organizations with fake audit emails to steal sensitive data like credentials and screenshots. Symantec’s robust defenses, including email security and machine learning, stop this malware effectively.
15-04-2025 SpyNote Malware Poses as Fake MissAV App: Symantec Shields Mobile Users Company News A dangerous SpyNote trojan disguises itself as a MissAV mobile app, targeting users in Japan and South Korea with a fake download site. This malware steals personal data, records audio, and risks identity theft or blackmail. Symantec’s mobile and web protection blocks this threat effectivel
15-04-2025 Symantec Safeguards Against Vite Arbitrary File Read Vulnerability Showcase Symantec offers robust protection against CVE-2025-30208, a Vite vulnerability that could allow unauthorized file access. Its network-based defenses detect and block this threat effectively. Vite has patched the issue in newer versions to ensure user safety.
14-04-2025 Symantec Shields Against HijackLoader’s New Stealth Tactics Cybersecurity HijackLoader, a cunning malware loader, now uses advanced tricks like call stack spoofing and anti-detection checks to hide its actions. Symantec steps up with powerful protection, spotting and blocking these threats across its tools. Stay safe from sneaky malware with Symantec’s reliable defenses.
14-04-2025 Symantec IPS Blocks Millions of Cyber Attacks to Protect Endpoints Service Symantec IPS shielded 359,700 endpoints last week, stopping 46.6 million attacks, including malware and server vulnerabilities. It blocked 83.7% of threats before infection, keeping desktops and servers safe. Learn how Symantec IPS safeguards businesses from cyber threats like cryptojacking and web redirects. Enable Symantec IPS today to strengthen your endpoint security!
14-04-2025 Symantec Shields Users from PelDox Ransomware’s Deceptive Tactics Company News Symantec protects against PelDox ransomware, which tricks victims into paying for fake file protection via Telegram. Unlike typical ransomware, PelDox falsely claims to safeguard files while encrypting them with a .lczx extension. Symantec’s advanced detection blocks these threats across endpoints.
14-04-2025 Symantec Endpoint Protection Blocks 7.5M Web Threats in One Week Company News Symantec Endpoint Protection and Browser Extensions safeguarded 180.7K devices, stopping 7.5 million attacks, including phishing and malware, in just seven days. Using URL reputation and intrusion prevention, it ensures robust cybersecurity.
14-04-2025 Symantec Shields Against Pulsar RAT Malware with Advanced Defenses Company News Symantec offers robust protection against Pulsar RAT, a new malware stealing sensitive data like passwords and cryptocurrency wallets. Its tools, including SONAR and machine learning, detect and block this threat effectively. VMware Carbon Black also stops Pulsar RAT using strict policies.
14-04-2025 ZeroTrace Stealer Malware Targets Sensitive Data: Symantec Offers Robust Protection Showcase ZeroTrace Stealer, a new C#-based infostealing malware, threatens credentials, cryptocurrency wallets, and more, spreading through underground forums. Symantec's advanced threat protection, including behavior-based and machine learning detection, safeguards users from this emerging cyberthreat.
11-04-2025 Symantec Warns of Chaos Ransomware Targeting IT Teams with Fake Security Tools Company News Symantec has identified a Chaos ransomware variant, disguised as a fake Acunetix software activator, targeting IT professionals like AppSec and Blue Teams. The malware encrypts files, demanding $900 in cryptocurrency for access. Symantec’s solutions, alongside VMware Carbon Black, block this growing cyber threat. Visit Broadcom’s Security Center to learn how Symantec can help protect your organization.
11-04-2025 Symantec Uncovers Shuckworm’s GammaSteel Malware Targeting Ukraine Military Mission Cybersecurity Symantec reports that the Russia-linked Shuckworm group used an updated GammaSteel malware to attack a Western military mission in Ukraine. GammaSteel steals sensitive data, spreading through infected USB drives and using tools like Tor for secrecy. The campaign shows increased sophistication in evading detection. Visit Symantec’s blog to learn how to protect against GammaSteel threats.
11-04-2025 Symantec Shields Against NanoCrypt Ransomware Threat Company News Symantec has detected NanoCrypt, a new ransomware that locks files and adds .ncrypt to their names, initially created "for fun" but potentially harmful in real attacks. NanoCrypt leaves a ransom note claiming no malicious intent, yet cybercriminals may exploit it. Symantec’s tools, including VMware Carbon Black, block this malware effectively.
10-04-2025 Neptune RAT Malware Targets Credentials and Crypto Wallets with Advanced Features Cybersecurity Neptune RAT, a dangerous remote access Trojan, steals credentials, cryptocurrency wallets, and even acts as ransomware, according to Symantec’s latest report. This highly modular malware uses plugins for persistence and evasion, posing a serious threat to users. Symantec and VMware Carbon Black offer protection through advanced detection methods.
10-04-2025 CrushFTP Vulnerability Exploited: Symantec Shields Users from Critical Threat Cybersecurity A serious flaw in CrushFTP, known as CVE-2025-31161, allows attackers to gain admin access without login, and it’s already being used in real attacks. Symantec steps in with strong protection, blocking threats like MeshAgent and TgBot using smart detection tools. This critical issue, rated 9.8, is now on CISA’s must-fix list.
10-04-2025 Symantec Blocks New Amethyst Stealer Variant from Sapphire Werewolf Attacks Company News Symantec has identified and neutralized a new Amethyst Stealer variant spread by the Sapphire Werewolf group through phishing emails posing as HR memos. The malware steals sensitive data, including credentials and documents, using advanced encryption and virtual environment checks. Symantec’s solutions, including VMware Carbon Black, provide robust protection against this threat.
09-04-2025 New Phishing Scam Uses Salary Adjustment PDF to Steal Outlook Credentials Company News A fresh phishing campaign spotted by Symantec tricks users with a “Salary Adjustment” PDF mimicking a DocuSign notice, redirecting them to an AWS-hosted fake Outlook login page. The email lures victims with a realistic design, but clicking VIEW DOCUMENT harvests their credentials for cybercrime. Symantec’s email security and file protection tools are actively blocking this threat.
08-04-2025 HollowQuill Campaign Targets Institutions with Malicious PDFs Company News The HollowQuill campaign is hitting academic and government groups globally, using fake PDFs disguised as research papers and official documents to trick users. This clever attack delivers malware through a .NET dropper, stealing sensitive data with help from tools like OneDrive and Golang shellcode. Symantec’s advanced protection, including VMware Carbon Black, blocks these threats effectively. Dive into the full report to learn how to stay safe from this growing cyber risk!
08-04-2025 EncryptHub Uses MSC Files to Deliver Malware, Symantec Responds Company News The EncryptHub group is exploiting a Microsoft Management Console flaw to spread malware like Rhadamanthys and StealC, targeting unpatched systems. Symantec’s security tools, backed by Broadcom, block these attacks using advanced detection methods. This campaign highlights the growing risk of data theft through clever file tricks. Visit the full report to learn how to keep your devices safe!
08-04-2025 Hellcat Ransomware Targets Key Sectors, Symantec Fights Back What's New The Hellcat ransomware group is hitting government, education, and energy sectors with advanced attacks, using phishing and zero-day flaws to steal and encrypt data. Symantec Adaptive Protection counters this evolving threat, blocking malicious behaviors across millions of endpoints. It tracks tactics like PowerShell payloads and data theft via SFTP, keeping organizations safe. Read the full bulletin to learn how to protect your business!