Category: GBHackers

Iranian Hackers Exploit RMM Tools to Target Academics and Foreign-Policy Experts
06
Nov
2025

Iranian Hackers Exploit RMM Tools to Target Academics and Foreign-Policy Experts

Proofpoint Threat Research has identified a previously unknown Iranian threat actor, dubbed UNK_SmudgedSerpent, that conducted sophisticated phishing campaigns against academics…

Threat Actors Exploit VS Code Extensions for Ransomware via GitHub C2
06
Nov
2025

Threat Actors Exploit VS Code Extensions for Ransomware via GitHub C2

Security researchers have uncovered a sophisticated attack campaign attributed to Kimsuky, the North Korean-backed threat group known for conducting espionage…

Cisco UCCX Vulnerabilities Allow Remote Attackers to Execute Arbitrary Code
06
Nov
2025

Cisco UCCX Vulnerabilities Allow Remote Attackers to Execute Arbitrary Code

Cisco has issued a critical security advisory addressing two severe vulnerabilities in its Unified Contact Center Express (CCX) platform that…

Gootloader Returns with a New ZIP File Tactic to Conceal Malicious Payloads
06
Nov
2025

Gootloader Returns with a New ZIP File Tactic to Conceal Malicious Payloads

Cybersecurity researchers have discovered a resurgent Gootloader malware campaign employing sophisticated new evasion techniques that exploit ZIP archive manipulation to…

06
Nov
2025

Gootloader Returns with a New ZIP File Tactic to Conceal Malicious Payloads

Cybersecurity researchers have discovered a resurgent Gootloader malware campaign employing sophisticated new evasion techniques that exploit ZIP archive manipulation to…

ValleyRAT Campaign Targets Windows via WeChat and DingTalk
06
Nov
2025

ValleyRAT Campaign Targets Windows via WeChat and DingTalk

A sophisticated Windows remote-access trojan known as ValleyRAT has emerged as a high-confidence indicator of targeted intrusions against Chinese-language users…

Multiple Django Flaws Could Allow SQL Injection and Denial-of-Service Attacks
06
Nov
2025

Multiple Django Flaws Could Allow SQL Injection and Denial-of-Service Attacks

The Django development team has released critical security patches addressing two significant vulnerabilities that could expose applications to denial-of-service attacks…

Authorities Dismantle Large-Scale Credit Card Fraud Scheme Affecting 4.3 Million Users
06
Nov
2025

Authorities Dismantle Large-Scale Credit Card Fraud Scheme Affecting 4.3 Million Users

 Authorities across nine countries executed a coordinated crackdown on one of the largest credit card fraud networks ever dismantled. Operation…

EndClient RAT Leverages Compromised Code-Signing to Slip Past Antivirus
06
Nov
2025

EndClient RAT Leverages Compromised Code-Signing to Slip Past Antivirus

A sophisticated Remote Access Trojan (RAT) is actively targeting North Korean Human Rights Defenders (HRDs) through a campaign leveraging stolen…

Hyundai AutoEver Confirms Data Breach Exposing Personal Data, Including SSNs and License Info
06
Nov
2025

Hyundai AutoEver Confirms Data Breach Exposing Personal Data, Including SSNs and License Info

Hyundai AutoEver America, LLC has formally confirmed a significant data breach that compromised sensitive customer information. The automotive software provider…

Google Warns of PROMPTFLUX Malware That Uses Gemini API for Self-Rewriting Attacks
06
Nov
2025

Google Warns of PROMPTFLUX Malware That Uses Gemini API for Self-Rewriting Attacks

Cybersecurity researchers at Google Threat Intelligence Group (GTIG) have identified a significant shift in how threat actors are leveraging artificial…

Google Issues Emergency Chrome Update to Fix Critical RCE Flaw
06
Nov
2025

Google Issues Emergency Chrome Update to Fix Critical RCE Flaw

Google has released an emergency security update for Chrome across all platforms, rolling out version 142.0.7444.134 and 142.0.7444.135 to address…