Aggregator

A Threat Actor is Allegedly Selling a Kraken Live Phishing Panel

基于 Ubuntu 的发行版 elementary OS 释出了 v8 版本。Elementary OS 8 重写了 Dock，引入了新的窗口管理功能，为视障用户改进了安装和初始设置程序，以及新的安全会话（Secure Session）模式。在安全会话模式中，应用将受到更多限制，需要用户同意才能访问系统功能。当应用想要在后台监听用户按键、截取屏幕截图、录制屏幕，甚至从单像素中提取颜色时，系统会先进行询问。安全会话支持混合 DPI（Mixed DPI）模式，改进了触摸屏和平板电脑多点触控的支持。

FSMON是一款多平台文件系统安全监控工具，该工具可以帮助广大研究人员在 Linux、Android、iOS 和 macOS 上实现文件系统安全监控。

A Threat Actor Has Allegedly Leaked the Data of Universidad Católica Santo Toribio de Mogrovejo

MORF是一款功能强大、轻量级且独立于平台的移动端网络安全工具，旨在帮助广大安全研究人员轻松识别和处理移动应用程序中的敏感信息。

Ransomware groups and state-sponsored actors increasingly exploit data exfiltration to maximize extortion and intelligence gains by leveraging a mix of custom and legitimate tools to steal sensitive data, including financial, personal, and classified information.  To mitigate risks, organizations must implement robust security measures, such as network monitoring, file integrity checks, and endpoint detection and response, […]

The post Researchers Detailed New Exfiltration Techniques Used By Ransomware Groups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A JavaScript-based malware targeting Magento eCommerce websites has been identified, which is designed to skim payment card details and activates exclusively on checkout pages.  The malware dynamically generates a fraudulent credit card form or directly extracts sensitive payment information, where the stolen data is encrypted and transmitted to a remote server.  The attack vector involves […]

The post New Skimmer Malware Steals Credit Card Data From Checkout Pages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Дмитровский полигон станет площадкой для тестов киберзащиты.

UNC2465, a financially motivated threat actor, leverages the SMOKEDHAM backdoor to gain initial access to target networks, which are often delivered via phishing emails, trojanized software, or supply chain attacks, enabling persistence and lateral movement.  Once in the network, UNC2465 utilizes tools like Advanced IP Scanner and BloodHound for reconnaissance, RDP for lateral movement, and […]

The post SMOKEDHAM Backdoor Mimic As Legitimate Tools Leveraging Google Drive & Dropbox appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.