Category: GBHackers

Threat Actors Pose as Government Officials to Attack Organizations with StallionRAT
03
Oct
2025

Threat Actors Pose as Government Officials to Attack Organizations with StallionRAT

In a recent wave of targeted phishing campaigns, the Cavalry Werewolf cluster has escalated its operations by impersonating government officials…

New Android Spyware Targeting Users by Imitating Signal and ToTok Apps
03
Oct
2025

New Android Spyware Targeting Users by Imitating Signal and ToTok Apps

ESET researchers have uncovered two sophisticated Android spyware campaigns that target users seeking secure communication platforms by impersonating popular messaging…

DrayOS Router Flaw Allows Remote Code Execution by Attackers
03
Oct
2025

DrayOS Router Flaw Allows Remote Code Execution by Attackers

A critical vulnerability affecting DrayOS routers could let unauthenticated attackers execute code remotely. Discovered on July 22 by Pierre-Yves Maes…

GhostSocks Malware-as-a-Service Turns Compromised Devices into Proxies for Threat Actors
03
Oct
2025

GhostSocks Malware-as-a-Service Turns Compromised Devices into Proxies for Threat Actors

On October 15, 2023, a threat actor using the handle GhostSocks published a sales post on the Russian cybercrime forum…

Hackers Exploit Grafana Vulnerability Allowing Arbitrary File Reads
03
Oct
2025

Hackers Exploit Grafana Vulnerability Allowing Arbitrary File Reads

Researchers at GreyNoise observed a sudden spike in attempts to exploit a well-known Grafana flaw. This vulnerability, tracked as CVE-2021-43798,…

SideWinder Hacker Group Targets Users with Fake Outlook/Zimbra Portals to Steal Login Credentials
03
Oct
2025

SideWinder Hacker Group Targets Users with Fake Outlook/Zimbra Portals to Steal Login Credentials

The notorious SideWinder APT group has intensified its credential harvesting operations across South Asia, deploying sophisticated phishing campaigns that target…

WhatsApp Exploited to Spread SORVEPOTEL Malware on Windows Systems
03
Oct
2025

WhatsApp Exploited to Spread SORVEPOTEL Malware on Windows Systems

An aggressive malware campaign dubbed SORVEPOTEL is exploiting WhatsApp messages to infiltrate Windows systems, with its epicenter in Brazil. Rather…

New ‘Point-and-Click’ Phishing Kit Evades Security Filters to Deliver Malicious Payloads
03
Oct
2025

New ‘Point-and-Click’ Phishing Kit Evades Security Filters to Deliver Malicious Payloads

A new toolkit named Impact Solutions has emerged on cybercrime forums, offering a comprehensive, user-friendly framework for crafting advanced phishing…

Hundreds of Free VPN Apps Expose Android and iOS Users’ Personal Data
03
Oct
2025

Hundreds of Free VPN Apps Expose Android and iOS Users’ Personal Data

Virtual Private Networks (VPNs) are trusted by millions to protect privacy, secure communications, and enable remote access on their mobile…

Signal Introduces Hybrid Post-Quantum Ratchet to Strengthen Security
03
Oct
2025

Signal Introduces Hybrid Post-Quantum Ratchet to Strengthen Security

Signal, the popular end-to-end encrypted messaging platform, has announced a groundbreaking advancement in cryptographic security with the introduction of the…

Confucius Hacker Group Weaponizes Documents to Infect Windows Systems with AnonDoor Malware
03
Oct
2025

Confucius Hacker Group Weaponizes Documents to Infect Windows Systems with AnonDoor Malware

The Confucius hacking group, a long-running cyber-espionage operation with suspected state-sponsored ties, has significantly evolved its attack methodologies over the…

New Obex Tools Blocks Runtime Loading of EDR Dynamic Libraries
03
Oct
2025

New Obex Tools Blocks Runtime Loading of EDR Dynamic Libraries

Obex, a newly released proof-of-concept utility by security researcher dis0rder0x00, demonstrates a simple but effective user-mode method to stop unwanted…