On November 24, a new wave of the Shai-Hulud supply chain attack emerged. The threat actors exfiltrate stolen credentials directly to GitHub repositories created with compromised tokens. GitGuardian identified 14,206 secrets across 487 organizations, with 2,485 still valid.
The post Shai-Hulud 2.0: over 14,000 secrets exposed appeared first on Security Boulevard.
A new malware campaign targeting Brazilian users has emerged, using WhatsApp as its primary distribution channel to spread banking trojans and harvest sensitive information. This sophisticated attack leverages social engineering by exploiting the trust victims place in their existing contacts, making the malicious files appear legitimate. The campaign begins with phishing emails containing archived VBS […]
The post Hackers Leveraging WhatsApp to Silently Install Malware to Harvest Logs and Contact Details appeared first on Cyber Security News.