A new campaign involving the notorious remote access trojan (RAT) Njrat has been uncovered, leveraging Microsoft’s Dev Tunnels service for command-and-control (C2) communication. This service, intended to help developers securely expose local services to the internet for testing and debugging, is being exploited by attackers to establish covert connections with their C2 servers. The abuse […]
The post Njrat Exploits Microsoft Dev Tunnels for C2 Communication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Security researchers have uncovered new evidence that North Korean threat actors, particularly the Lazarus Group, are actively using Astrill VPN to conceal their true IP addresses during cyberattacks and fraudulent IT worker schemes. Silent Push, a cybersecurity firm, recently acquired infrastructure and logs from the Lazarus subgroup known as “Contagious Interview” or “Famous Chollima,” confirming […]
The post North Korean IT Workers Hide Their IPs Using Astrill VPN appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.