Hackers Deliver STRRAT Malware Using Weaponized PDF Files
A versatile Java-based RAT that is capable of keylogging and credential theft from browsers and email clients emerged in 2020 that is dubbed “STRRAT.” The…
Category: GBHackers
CISA Advisory of Top 42 Vulnerabilities Frequently Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has published a report which was co-authored by the NSA, FBI, and the FYEY (Five Eyes) from different…
What is BEC Attacks (Business Email Compromise)?
BEC, an acronym for Business Email Compromise, is a sophisticated form of cybercrime. Cyber threats have become a pressing concern in a world where almost…
Hacker Group of 1980s Returns With Secure Coding Framework
Cult of the Dead Cow (cDc) is one of the oldest and most highly influential hacking groups that was formed at the end of the…
Mysterious Team Bangladesh Hackers Launched 750 DDoS Attacks
The notorious Hacktivists group, Known as Mysterious Team Bangladesh, exploits vulnerable versions of PHPMyAdmin and WordPress. It conducts DDoS and defacement attacks through open-source utilities…
New Phishing Attack Facebook Business Account Users
An unreported phishing campaign that disseminated a Python version of the NodeStealer has been found. NodeStealer gave threat actors the ability to steal browser cookies and…
Over 600+ Citrix Servers Hacked To Install Web Shells
A critical remote code execution (RCE) vulnerability identified as CVE-2023-3519 has been the subject of several attacks, which have already compromised and backdoored hundreds of Citrix Netscaler…
Hackers Abuse AWS SSM Agent to Perform Malicious Activities
Legitimate SSM agents can turn malicious when attackers with high-privilege access use it to carry out ongoing malicious activities on an endpoint. Once compromised, the…
Beware of Fake FlipperZero Sites That Promise Free Device Offer
A website pretending to be Flipper Devices offers a free FlipperZero in exchange for completing an offer, but it merely directs users to insecure browser…
HackerOne Lays off 12% of Its Employees as a One-Time Event
HackerOne is a renowned cybersecurity company that offers bounty and penetration testing platforms to ethical hackers for the following activities:- Asset discovery Continuous assessment Process…
CISA Guide to Harden Cisco Firewalls
The National Security Agency (NSA) has released best practices for configuring and hardening Cisco Firepower Threat Defense (FTD) which can help network and system administrators…
Researchers Uncovered a New Flaw in AI Chatbots to Evil
LLMs are commonly trained on vast internet text data, often containing offensive content. To mitigate this, developers use “alignment” methods via finetuning to prevent harmful…