Iran’s MuddyWater Evolves with a New Cyber Weapon
Jun 29, 2023Ravie Lakshmanan The Iranian state-sponsored group dubbed MuddyWater has been attributed to a previously unseen command-and-control (C2) framework called PhonyC2 that’s been put…
Category: TheHackerNews
Flutter-Based Android Malware Targets Credit Cards and 2FA Codes
Jun 29, 2023Ravie LakshmananMobile Security / Malware Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse. The malware “represents a…
Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users’ Personal Data
Jun 29, 2023Ravie LakshmananMobile Security / Privacy Android-based phone monitoring app LetMeSpy has disclosed a security breach that allowed an unauthorized third-party to steal sensitive…
North Korean Hacker Group Andariel Strikes with New EarlyRat Malware
Jun 29, 2023Ravie LakshmananVulnerability / Malware The North Korea-aligned threat actor known as Andariel leveraged a previously undocumented malware called EarlyRat in attacks exploiting the…
The Right Way to Enhance CTI with AI (Hint: It’s the Data)
Cyber threat intelligence is an effective weapon in the ongoing battle to protect digital assets and infrastructure – especially when combined with AI. But AI…
Critical Security Flaw in Social Login Plugin for WordPress Exposes Users’ Accounts
Jun 29, 2023Ravie LakshmananWebsite Security / Vulnerability A critical security flaw has been disclosed in miniOrange’s Social Login and Register plugin for WordPress that could…
Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data
Jun 29, 2023Ravie LakshmananCyber Threat / Hacking A previously undocumented Windows-based information stealer called ThirdEye has been discovered in the wild with capabilities to harvest…
New Electromagnetic Attacks on Drones Could Let Attackers Take Control
Jun 28, 2023Ravie LakshmananFirmware Security / Tech Drones that don’t have any known security weaknesses could be the target of electromagnetic fault injection (EMFI) attacks,…
CryptosLabs Scam Ring Targets French-Speaking Investors, Rakes in €480 Million
Jun 28, 2023Ravie LakshmananCyber Crime / Cryptocurrency Cybersecurity researchers have exposed the workings of a scam ring called CryptosLabs that’s estimated to have made €480…
8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses
Jun 28, 2023Ravie LakshmananRansomware / Cyber Threat A ransomware threat called 8Base that has been operating under the radar for over a year has been…
5 Things CISOs Need to Know About Securing OT Environments
For too long the cybersecurity world focused exclusively on information technology (IT), leaving operational technology (OT) to fend for itself. Traditionally, few industrial enterprises had…
Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution
Jun 28, 2023Ravie LakshmananEndpoint Security / RCE Multiple SQL injection vulnerabilities have been disclosed in Gentoo Soko that could lead to remote code execution (RCE)…