Aggregator

MassJacker Clipper Malware Targets Users Installing Pirated Software

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 4 weeks ago

A recent investigation has uncovered previously unknown cryptojacking malware, dubbed MassJacker, which primarily targets users who download pirated software from sites like pesktop.com. This malware operates by replacing cryptocurrency wallet addresses copied by users with those belonging to the attackers, aiming to redirect funds to the threat actors’ wallets. The discovery highlights the risks associated […]

The post MassJacker Clipper Malware Targets Users Installing Pirated Software appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

SocGholish Exploits Compromised Websites to Deliver RansomHub Ransomware

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 4 weeks ago

SocGholish, a sophisticated malware-as-a-service (MaaS) framework, has been identified as a key enabler in the distribution of RansomHub ransomware. This malicious framework exploits compromised websites by injecting them with obfuscated JavaScript loaders, which redirect users to fake browser update notifications. These notifications trick users into downloading and executing malicious files, thereby initiating the infection process. […]

The post SocGholish Exploits Compromised Websites to Deliver RansomHub Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

New Steganographic Malware Hides in JPG Files to Deploy Multiple Password Stealers

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 4 weeks ago

A recent cybersecurity threat has emerged in the form of a steganographic campaign that uses seemingly harmless JPG files to distribute multiple types of malware, including password stealers like Remcos and AsyncRAT. This sophisticated attack begins with a phishing email containing a malicious Excel document that exploits a known vulnerability, CVE-2017-0199, to initiate the infection […]

The post New Steganographic Malware Hides in JPG Files to Deploy Multiple Password Stealers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

New C++-Based IIS Malware Mimics cmd.exe to Evade Detection

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 4 weeks ago

A recent discovery by Palo Alto Networks’ Unit 42 has shed light on sophisticated malware targeting Internet Information Services (IIS) servers. This malware, developed in C++/CLI, a rare choice for malware authors, has been designed to mimic the behavior of cmd.exe to evade detection. The malware operates as a passive backdoor, integrating itself into the […]

The post New C++-Based IIS Malware Mimics cmd.exe to Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2022-1153 | LayerSlider Plugin up to 7.1.1 on WordPress Project Slug cross site scripting

Vuldb Updates
3 months 4 weeks ago
A vulnerability has been found in LayerSlider Plugin up to 7.1.1 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Project Slug Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2022-1153. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad