Chinese APT Flax Typhoon uses legit tools for cyber espionage
KEY FINDINGS Microsoft has identified a Chinese government-backed APT group called Flax Typhoon. The group has been targeting Taiwanese organizations since mid-2021. Flax Typhoon does…
Author: Cybernoz
VMware Patches Major Security Flaws in Network Monitoring Product
Virtualization technology giant VMware on Tuesday shipped a major security update to correct at least two critical vulnerabilities in its Aria Operations for Networks product…
Qakbot botnet disrupted, malware removed from 700,000+ victim computers
The Qakbot botnet has been crippled by the US Department of Justice (DOJ): 52 of its servers have been seized and the popular malware loader…
OpenAI Turns to Security to Sell ChatGPT Enterprise
Looking to cash in on the gold rush for generative-AI computing, OpenAI has rolled out a business edition of its popular ChatGPT app promising “enterprise-grade…
New Android MMRat malware uses Protobuf protocol to steal your data
A novel Android banking malware named MMRat utilizes a rarely used communication method, protobuf data serialization, to more efficiently steal data from compromised devices. MMRat was spotted…
New ‘MMRat’ Android Trojan Targeting Users in Southeast Asia
A newly identified Android trojan targeting users in Southeast Asia is allowing attackers to control devices remotely and perform bank fraud, Trend Micro reports. Dubbed…
Qakbot botnet dismantled after infecting over 700,000 computers
Qakbot, one of the largest and longest-running botnets to date, was taken down following a multinational law enforcement operation spearheaded by the FBI and known…
New MMRat Android Trojan Uses Fake App Stores for Bank Fraud
MMRat is a new Android banking trojan targeting Southeast Asian users. It is distributed through phishing websites disguised as official app stores. It uses a…
Microsoft adds HSTS support to Exchange Server 2016 and 2019
Microsoft announced today that Exchange Server 2016 and 2019 now come with support for HTTP Strict Transport Security (also known as HSTS). HSTS is a…
Criminals hack radio commands to stop Poland Trains
Over the past 48 hours, media outlets have been abuzz with reports of Russian cyber-attacks targeting government websites. However, what remains shrouded in relative obscurity…
DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates
Aug 29, 2023The Hacker NewsMalware / Cyber Threat A new malspam campaign has been observed deploying an off-the-shelf malware called DarkGate. “The current spike in…
Reborn XSpear 🔱
제가 Dalfox 를 개발하기 전에 Ruby로 작성했었던 XSpear란 도구가 있었습니다. 동일하게 XSS를 테스팅하기 위한 도구였고, 현재 성능은 당연히 Dalfox쪽이 압도적으로 좋은 상태입니다. 그리고 작년부터 XSpear에…