Researchers Shed Light on APT31’s Advanced Backdoors and Data Exfiltration Tactics
Aug 11, 2023THNMalware / Cyber Attack The Chinese threat actor known as APT31 (aka Bronze Vinewood, Judgement Panda, or Violet Typhoon) has been linked to…
Category: TheHackerNews
New SystemBC Malware Variant Targets Southern African Power Company
Aug 11, 2023THNMalware / Cyber Threat An unknown threat actor has been linked to a cyber attack on a power generation company in southern Africa…
15 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks
Aug 11, 2023THNOperational Technology / Vulnerability A set of 15 high-severity security flaws have been disclosed in the CODESYS V3 software development kit (SDK) that…
CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation
Aug 11, 2023THNEndpoint Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched security flaw in Microsoft’s .NET and…
Freeze[.]rs Injector Weaponized for XWorm Malware Attacks
Aug 10, 2023THNMalware / Cyber Threat Malicious actors are using a legitimate Rust-based injector called Freeze[.]rs to deploy a commodity malware called XWorm in victim…
Your Sensitive Data at Risk
Aug 10, 2023THNMalware / Cyber Threat A new information malware strain called Statc Stealer has been found infecting devices running Microsoft Windows to siphon sensitive…
Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization
Aug 10, 2023The Hacker NewsThreat Detection / Attack Signal Attackers continue to target Microsoft identities to gain access to connected Microsoft applications and federated SaaS…
Encryption Flaws in Popular Chinese Language App Put Users’ Typed Data at Risk
Aug 10, 2023THNPrivacy / Encryption A widely used Chinese language input app for Windows and Android has been found vulnerable to serious security flaws that…
Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives
Threat actors are increasingly using a phishing-as-a-service (PhaaS) toolkit dubbed EvilProxy to pull off account takeover attacks aimed at high-ranking executives at prominent companies. According…
Interpol Busts Phishing-as-a-Service Platform ’16Shop,’ Leading to 3 Arrests
Aug 10, 2023THNCyber Crime / Hacking Interpol has announced the takedown of a phishing-as-a-service (PhaaS) platform called 16Shop, in addition to the arrests of three…
New Side-Channel Attacks Affecting Modern CPUs
Cybersecurity researchers have disclosed details of a trio of side-channel attacks that could be exploited to leak sensitive data from modern CPUs. Called Collide+Power (CVE-2023-20583),…
17 Nations Hit in 3-Year Cyber Campaign
Aug 09, 2023THNCyber Espionage / Cyber Attacks Hackers associated with China’s Ministry of State Security (MSS) have been linked to attacks in 17 different countries…