GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A newly discovered malware, dubbed Trojan.Arcanum, is targeting enthusiasts of tarot, astrology, and other esoteric practices. Disguised as a legitimate fortune-telling application, this Trojan infiltrates devices to steal sensitive data, manipulate users through social engineering, and even deploy cryptocurrency mining software. The malware is distributed via websites dedicated to mystical practices, masquerading as a harmless […]

The post New Malware Targets Magic Enthusiasts to Steal Logins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated phishing campaign orchestrated by a Russian-speaking threat actor has been uncovered, revealing the abuse of Cloudflare services and Telegram for malicious purposes. Researchers at Hunt.io have identified this new wave of attacks, which employs Cloudflare-branded phishing pages and advanced tactics to evade detection. The campaign utilizes Cloudflare’s Pages.dev and Workers.dev platforms typically used […]

The post Hackers Exploit Cloudflare for Advanced Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated malware campaign has compromised over 1,500 PostgreSQL servers, leveraging fileless techniques to deploy cryptomining payloads. The attack, identified by Wiz Threat Research and attributed to the threat actor group JINX-0126, exploits publicly exposed PostgreSQL instances configured with weak or default credentials. The attackers utilize these vulnerabilities to execute XMRig-C3 cryptominers without leaving detectable […]

The post Over 1,500 PostgreSQL Servers Hit by Fileless Malware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mozilla has officially launched Firefox 137 with crucial security fixes aimed at addressing several high-severity vulnerabilities reported by security researchers. As part of its April 1, 2025, Mozilla Foundation Security Advisory (MFSA 2025-20), the foundation detailed three significant Common Vulnerabilities and Exposures (CVEs), which could have permitted attackers to exploit users’ machines through various means, […]

The post Firefox 137 Launches with Patches for High-Severity Security Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A privilege escalation vulnerability in Google Cloud Platform (GCP), dubbed “ImageRunner,” was recently discovered and fixed. The flaw, which Tenable Research brought to light, potentially allowed attackers to exploit Google Cloud Run permissions and access sensitive data stored in private container images. Discovering the ImageRunner Vulnerability The vulnerability hinged on improper permission handling for identities […]

The post Google Cloud Platform Vulnerability Exposes Sensitive Data to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

French antitrust regulators have imposed a hefty fine of €150 million ($162.4 million) on tech giant Apple for abusing its dominant position in mobile app advertising through its App Tracking Transparency (ATT) tool. The ruling marks the first fine by regulators globally targeting Apple’s ATT feature, which controls user tracking permissions for third-party apps on […]

The post Apple Fined $162 Million by France Authorities for Mobile Ad Market Domination appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security alert has been issued to WordPress site administrators following the discovery of two high-severity vulnerabilities in the “WP Ultimate CSV Importer” plugin. With over 20,000 active installations, the plugin’s flaws pose a significant risk to affected websites, potentially leading to complete site takeovers by attackers. CVE Identified: File Upload and Deletion Exploits […]

The post 20,000 WordPress Sites at Risk of File Upload & Deletion Exploits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybersecurity landscape has witnessed a concerning development with the emergence of “Prince Ransomware,” an open-source ransomware builder that was freely accessible on GitHub until recently. This tool, written in the Go programming language, has been exploited by cybercriminals to launch sophisticated ransomware attacks with minimal technical expertise. The recent attack on Mackay Memorial Hospital […]

The post Prince Ransomware – An Automated Open-Source Ransomware Builder Freely Available on GitHub appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have identified a growing trend in phishing attacks leveraging QR codes, a tactic known as “quishing.” These attacks exploit the widespread use of smartphones to deceive users into exposing sensitive credentials, particularly targeting Microsoft accounts. According to recent findings, attackers are embedding malicious URLs within QR codes to bypass traditional security measures and […]

The post QR Code Phishing (Quishing) Attack Your Smartphones To Steal Microsoft Accounts Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korean IT workers have intensified their global operations, expanding their employment footprint across Europe to infiltrate corporate networks and generate revenue for the regime. According to the latest report by Google Threat Intelligence Group (GTIG), these workers pose as legitimate remote employees, leveraging advanced technical skills and deceptive tactics to gain access to sensitive […]

The post North Korea IT Workers Expand Their Employment Across Europe To Infiltrate the Company Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Israeli Internet Association has issued a public warning about a surge in cyberattacks targeting Telegram accounts in Israel. The campaign, traced to hackers in Bangladesh and Indonesia, exploits vulnerabilities in voicemail systems to hijack accounts and, in some cases, register new ones using phone numbers of individuals who have never used Telegram, including minors. […]

The post Hackers Hijack Telegram Accounts via Default Voicemail Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The notorious Gootloader malware has resurfaced with a new campaign that combines old tactics with modern delivery methods. This latest iteration leverages Google Ads to target users searching for legal document templates, such as non-disclosure agreements (NDAs) or lease agreements. The campaign exemplifies the evolving strategies of threat actors who exploit trust in legitimate platforms […]

The post Gootloader Malware Spreads via Google Ads with Weaponized Documents appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has unveiled end-to-end encryption (E2EE) capabilities for Gmail enterprise users, simplifying encrypted email communication for businesses of all sizes. This feature, launched in beta today to coincide with Gmail’s birthday, aims to bridge the gap between robust security and user-friendly functionality, allowing organizations to enhance data privacy without the traditional complexity of encryption setups. […]

The post Google Introduces End-to-End Encryption for Gmail Business Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Sliver Command & Control (C2) framework, an open-source tool written in Go, has been a popular choice for offensive security practitioners since its release in 2020. However, as detection mechanisms evolve, out-of-the-box Sliver payloads are increasingly flagged by Endpoint Detection and Response (EDR) solutions. Recent research demonstrates how minor yet strategic modifications to the […]

The post Sliver Framework Customized Enhances Evasion and Bypasses EDR Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware continues to be one of the most disruptive cyber threats, with recent data revealing that it affects 93% of industries globally. According to Verizon’s 2024 Data Breach Investigations Report, ransomware is implicated in one-third of all data breaches, underscoring its widespread impact across sectors. This malicious software encrypts critical business data and demands payment […]

The post Ransomware Threatens 93% of Industries— Resilience Is Critical appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

As the U.S. tax filing deadline approaches, cybercriminals are intensifying their efforts to exploit taxpayers through a new wave of IRS-themed scams. Research from McAfee Labs has revealed a sharp increase in fraudulent activities targeting mobile devices, with scammers using deceptive text messages and fake IRS websites to steal personal and financial information. Mobile Attacks […]

The post New Surge of IRS-Themed Attacks Targets Taxpayers’ Mobile Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity experts at eSentire’s Threat Response Unit (TRU) uncovered a sophisticated malware campaign leveraging KoiLoader, a malicious loader designed to deploy information-stealing payloads. This campaign utilized PowerShell scripts and obfuscation techniques to bypass security measures and infect systems. The investigation revealed a multi-stage infection chain, highlighting the evolving tactics of cybercriminals. Infection Chain and Delivery […]

The post KoiLoader Exploits PowerShell Scripts to Drop Malicious Payloads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

APT34, also known as OilRig or Helix Kitten, has intensified its cyber-espionage campaigns, deploying custom malware to target entities within the finance and telecommunications sectors. The group, active since 2012, is a well-documented advanced persistent threat (APT) actor linked to the Middle East. Recent investigations by the ThreatBook Research and Response Team have revealed that […]

The post APT34 Deploys Custom Malware Targeting Finance and Telecom Sectors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability has been identified in the Plantronics Hub software, a client application commonly used to configure Plantronics audio devices such as headsets. The flaw, classified as an unquoted search path vulnerability, allows attackers to execute arbitrary files and escalate privileges to administrative levels under certain conditions. This issue is particularly concerning as the […]

The post Plantronics Hub Flaw Allows Attackers to Gain Elevated Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

HijackLoader, a malware loader first identified in 2023, has undergone significant evolution with the addition of new modules designed to enhance its stealth capabilities and evade malware analysis environments. Recent research by Zscaler ThreatLabz reveals that these updates include advanced techniques such as call stack spoofing, virtual machine (VM) detection, and persistence mechanisms, marking a […]

The post HijackLoader Evolves with New Modules for Stealth and Malware Analysis Evasion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.