The MFA Blind Spots No One Talks About
Mar 10, 2023The Hacker NewsMulti-factor Authentication Multi-factor Authentication (MFA) has long ago become a standard security practice. With a wide consensus on its ability to…
Category: TheHackerNews
International Law Enforcement Takes Down Infamous NetWire Cross-Platform RAT
Mar 10, 2023Ravie LakshmananCyber Crime / Cyber Threat A coordinated international law enforcement exercise has taken down the online infrastructure associated with a cross-platform remote…
China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware
Mar 10, 2023Ravie LakshmananNetwork Security / Cyber Threat A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access (SMA) 100 appliances…
New Version of Prometei Botnet Infects Over 10,000 Systems Worldwide
Mar 10, 2023Ravie LakshmananEndpoint Security / Hacking An updated version of a botnet malware called Prometei has infected more than 10,000 systems worldwide since November…
Xenomorph Android Banking Trojan Returns with a New and More Powerful Variant
Mar 10, 2023Ravie LakshmananMobile Security / Android A new variant of the Android banking trojan named Xenomorph has surfaced in the wild, the latest findings…
North Korean UNC2970 Hackers Expands Operations with New Malware Families
Mar 10, 2023Ravie LakshmananCyber Attack / Malware A North Korean espionage group tracked as UNC2970 has been observed employing previously undocumented malware families as part…
Iranian Hackers Target Women Involved in Human Rights and Middle East Politics
Mar 09, 2023Ravie LakshmananCyber Espionage Iranian state-sponsored actors are continuing to engage in social engineering campaigns targeting researchers by impersonating a U.S. think tank. “Notably…
IceFire Ransomware Exploits IBM Aspera Faspex to Attack Linux-Powered Enterprise Networks
Mar 09, 2023Ravie LakshmananLinux / Endpoint Security A previously known Windows-based ransomware strain known as IceFire has expanded its focus to target Linux enterprise networks…
Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware
Mar 09, 2023Ravie LakshmananThreat Intelligence / Malware Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to…
Does Your Help Desk Know Who’s Calling?
Mar 09, 2023The Hacker NewsPassword Security / Enterprise Security Phishing, the theft of users’ credentials or sensitive data using social engineering, has been a significant…
New ScrubCrypt Crypter Used in Cryptojacking Attacks Targeting Oracle WebLogic
Mar 09, 2023Ravie LakshmananCryptojacking / Threat Detection, The infamous cryptocurrency miner group called 8220 Gang has been observed using a new crypter called ScrubCrypt to…
New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access
Mar 09, 2023Ravie LakshmananNetwork Security / Firewall Fortinet has released fixes to address 15 security flaws, including one critical vulnerability impacting FortiOS and FortiProxy that…