Chinese Threat Group Hacked Major US Telecom Companies
According to U.S. officials, a Chinese hacker group known as “Salt Typhoon” has infiltrated the networks of at least three major U.S. telecommunications providers in…
Category: CyberSecurityNews
Malicious PyPI Packages Mimics a Legitimate Tools
Threat actors target the “PyPI” primarily due to its vast user base and the ease of distributing malicious packages within an “open-source ecosystem.” The decentralized…
Beware Of Fraudulent Trading Apps From Apple And Google Play Store That Steal Login Credentials
Fraudulent trading apps have emerged as a significant threat to users in cyberspace. As these applications target and lure victims via lucrative ads on different…
Hackers Exploit CosmicSting Flaw to Hack 1000+ Adobe Commerce & Magento Stores
Adobe Commerce (formerly known as Magento) is a robust e-commerce platform owned by Adobe that provides flexible and scalable solutions for both B2B and B2C…
LEGO Website Hacked to Promote a Crypto Scam
Cryptocurrency scammers temporarily compromised the LEGO website to deceive fans into buying a fake “LEGO Coin” cryptocurrency. The breach occurred on October 4, 2024, when…
North Korean Hackers Attacking U.S. Organizations With Unique Hacking Tools
Cyber extortion is a cybercrime under which the threat actors illicitly access “sensitive data” in systems and demand a “ransom” to stop the attack to…
CISA Warns Active Exploitation of Zimbra & Ivanti Endpoint Manager Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of critical vulnerabilities in Synacor’s Zimbra Collaboration and Ivanti’s…
Hackers Turned Visual Studio Code As A Remote Access Tool
Visual Studio is a powerful integrated development environment from Microsoft and it’s primarily used for developing apps on the “.NET framework.” It supports various programming…
New Perfctl Malware Attacking Millions of Linux Servers
A sophisticated and elusive malware known as “Perfctl,” has been discovered targeting millions of Linux servers worldwide. Researchers at Aqua Nautilus have shed light on…
SquareX Shows How Malicious Extensions Bypass Google’s MV3 Restrictions
At DEF CON 32, the SquareX research team delivered a hard-hitting presentation titled Sneaky Extensions: The MV3 Escape Artists where they shared their findings on…
How To Collect Malware Indicators Of Compromise In The ANY.RUN Sandbox
Indicators of Compromise (IOCs) are critical forensic artifacts that cybersecurity researchers use to “detect,” “investigate,” and “mitigate” security threats. As these digital clues contain “suspicious…
How Analysts Use Telegram API to Intercept Data Exfiltrated by Malware
Threat actors are increasingly relying on Telegram and Discord apps for data exfiltration. Analysts at ANY.RUN shared a detailed guide to intercepting data stolen by…