Category: GBHackers

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data
28
Feb
2025

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data

Netskope Threat Labs uncovered a sprawling phishing operation involving 260 domains hosting approximately 5,000 malicious PDF files. These documents, disguised…

Winos4.0 Malware Targets Windows Users Through Malicious PDF Files
28
Feb
2025

Winos4.0 Malware Targets Windows Users Through Malicious PDF Files

A new wave of cyberattacks leveraging the Winos4.0 malware framework has targeted organizations in Taiwan through malicious PDF attachments disguised…

New Malware Uses Legitimate Antivirus Driver to Bypass All System Protections
28
Feb
2025

New Malware Uses Legitimate Antivirus Driver to Bypass All System Protections

In a concerning development, cybersecurity researchers at Trellix have uncovered a sophisticated malware campaign that exploits a legitimate antivirus driver…

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations
27
Feb
2025

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations

The DragonForce ransomware group has launched a significant cyberattack on critical infrastructure in Saudi Arabia, targeting a prominent real estate…

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details
27
Feb
2025

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details

In Q3 2024, Cofense Intelligence uncovered a targeted spear-phishing campaign aimed at employees working in social media, marketing, and related…

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited
27
Feb
2025

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited

Cyber adversaries have evolved into highly organized and professional entities, mirroring the operational efficiency of legitimate businesses, according to the…

Multi-Vector Malware Exploiting Outlook API, DNS & ICMP Tunneling for C2
27
Feb
2025

Multi-Vector Malware Exploiting Outlook API, DNS & ICMP Tunneling for C2

A newly identified malware, dubbed “Squidoor,” has emerged as a sophisticated threat targeting government, defense, telecommunications, education, and aviation sectors…

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communications
27
Feb
2025

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communications

The Lotus Blossom hacker group, also known as Spring Dragon, Billbug, or Thrip, has been identified leveraging legitimate cloud services…

LARVA-208 Hackers Compromise 618 Organizations Stealing Logins and Deploying Ransomware
27
Feb
2025

LARVA-208 Hackers Compromise 618 Organizations Stealing Logins and Deploying Ransomware

A newly identified cybercriminal group, LARVA-208, also known as EncryptHub, has successfully infiltrated 618 organizations globally since June 2024, leveraging…

WordPress Admins Warned of Fake Plugins Injecting Malicious Links into Websites
27
Feb
2025

WordPress Admins Warned of Fake Plugins Injecting Malicious Links into Websites

A new wave of cyberattacks targeting WordPress websites has been uncovered, with attackers leveraging fake plugins to inject malicious links…

New Anubis Ransomware Targets Windows, Linux, NAS, and ESXi x64/x32 Environments
27
Feb
2025

New Anubis Ransomware Targets Windows, Linux, NAS, and ESXi x64/x32 Environments

A new ransomware group, dubbed Anubis, has emerged as a significant threat in the cybersecurity landscape. Active since late 2024,…

VS Code Extension with 9 Million Installs Attacks Developers with Malicious Code
27
Feb
2025

VS Code Extension with 9 Million Installs Attacks Developers with Malicious Code

Microsoft has removed two widely-used Visual Studio Code (VS Code) extensions, “Material Theme Free” and “Material Theme Icons Free,” from…