The Hacker News | #1 Trusted Cybersecurity News Site
WEBChinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks. Sep 09, 2024 Cyber Espionage / Malware. The China-linked advanced persistent threat (APT) group known as Mustang Panda has been observed weaponizing Visual Studio Code software as part of espionage operations targeting government entities in Southeast Asia.
How Phishing Attacks Adapt Quickly to Capitalize on Current Events
WEBAug 12, 2024 · Phishing attacks related to the 2024 Olympics in Paris also showcased threat actors' ability to execute more effective campaigns by tying them to current events. As one example of attacks in this category, Cyberint detected phishing emails claiming that recipients had won tickets to the Games and that, to collect the tickets, they needed to ...
OneDrive Phishing Scam Tricks Users into Running Malicious …
WEBJul 30, 2024 · Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. "This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, thereby compromising their systems," Trellix security researcher ...
Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
WEBMay 17, 2021 · Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different versions of the campaign have been …
Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE …
WEBAug 9, 2024 · Microsoft on Thursday disclosed four medium-severity security flaws in the open-source OpenVPN software that could be chained to achieve remote code execution (RCE) and local privilege escalation (LPE). "This attack chain could enable attackers to gain full control over targeted endpoints, potentially resulting in data breaches, system ...
Conti Ransomware Operation Shut Down After Splitting into …
WEBMay 24, 2022 · The diversion tactics aside, Conti's infiltration specialists are also said to have forged alliances with other well-known ransomware groups such as BlackCat, AvosLocker, Hive, and HelloKitty (aka FiveHands).. Additionally, the cybersecurity firm said it had seen internal communication alluding to the fact that Russian law enforcement …
New Python-Based Snake Info Stealer Spreading Through …
WEBMar 7, 2024 · Facebook messages are being used by threat actors to distribute a Python-based information stealer dubbed Snake that's designed to capture credentials and other sensitive data. "The credentials harvested from unsuspecting users are transmitted to different platforms such as Discord, GitHub, and Telegram," Cybereason researcher …
Vice Society Ransomware Attackers Targeted Dozens of Schools in …
WEBDec 7, 2022 · The operators have been observed obtaining initial network access through compromised credentials by leveraging internet-facing applications, in addition to abusing known security flaws to escalate privileges.. Unit 42's incident response efforts show that the group has a dwell time of six days in the victims' environments and that the initial …
China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 …
WEBJun 12, 2024 · State-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security flaw between 2022 and 2023, indicating that the operation had a broader impact than previously known. "The state actor behind this campaign was already aware of this vulnerability in FortiGate ...
The Hacker News Deals
WEBSwiftScan VIP: Lifetime Subscription. 2 Reviews. $59.99 $199.99. The Hacker News Deals scours the web for the newest software, gadgets & web services. Explore our giveaways, bundles, Pay What You Want deals & more.