Aggregator

North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials

Cybercriminals are leveraging AI-powered phishing attacks, website cloning tools, and RCE exploits to target e-commerce platforms during the holiday season, which allow attackers to craft convincing phishing emails, replicate legitimate websites, and gain unauthorized access to systems.  The objective of cybercriminals is to steal sensitive information and financial data from shoppers who are unaware of […]

The post Hackers Cloning Websites, Exploiting RCE Flaws To Gain Access To Shopping Platforms appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

wevtutil.exe, a Windows Event Log management tool, can be abused for LOLBAS attacks. By manipulating its capabilities, attackers can execute arbitrary commands, download malicious payloads, and establish persistence, all while evading traditional security measures. It is a Windows tool for event log management that can be exploited by attackers to manipulate system logs, potentially concealing […]

The post Hackers Exploited Windows Event Logs Tool log Manipulation, And Data Exfiltration appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A novel backdoor malware and a loader that customizes payload names for each victim have been added to the threat group's cybercriminal tool set.

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws

Keyblock Solutions 宣布与 MistTrack 达成战略合作

【行业动态】供应链投毒预警 | 恶意NPM包内嵌木马程序开展投毒攻击

第三届网络空间仿真与评测国际会议在深举办

Today, the FTC banned data brokers Mobilewalla and Gravy Analytics from harvesting and selling Americans' location tracking data linked to sensitive locations, like churches, healthcare facilities, military installations, and schools. [...]

Harvesting GitLab Pipeline Secrets

Vulnerabilità 0-day in Windows Server 2012: 0patch rilascia una fix gratuita

样本分析 基于 rust 的恶意软件 SSLoad

某某热点app登录sign值逆向分析

codeql实战练习-micro_service_seclab

2024 古剑山web&pwn&re&misc wp

提示词注入攻击

2024古剑山 pwn 详解

江苏移动“建材赋能”线下个人决赛crypto三道0解题

2024古剑山Pwn方向全部题解