GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A recent cybersecurity threat has been identified, where steganographic malware is being distributed through seemingly innocuous JPEG image files. This sophisticated campaign involves luring users into downloading obfuscated JPEG files that contain hidden malicious scripts and executables. Once these files are executed, the malware targets the extraction of sensitive credentials and data from browsers, email […]

The post New Steganographic Malware Hides in JPEG Files to Spread Infostealers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Symantec’s Threat Hunter team has identified a sophisticated custom backdoor named “Betruger” linked to a RansomHub affiliate. This newly discovered backdoor appears to be purpose-built for ransomware operations, consolidating multiple attack functions into a single tool, likely to minimize the attacker’s footprint during campaigns. Advanced Multi-Function Malware Discovered The backdoor incorporates an extensive array of […]

The post RansomHub Affiliate Deploys New Custom Backdoor “Betruger” for Persistent Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new malware campaign has been uncovered, involving a sophisticated stealer known as Arcane, which is distributed through YouTube videos promoting game cheats. This campaign highlights the evolving tactics of cybercriminals, who continue to exploit popular platforms to spread malware. The Arcane stealer is notable for its extensive data collection capabilities, targeting a wide range […]

The post New Arcane Stealer Spreads via YouTube, Stealing VPN and Browser Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation by cybersecurity firm Nisos has uncovered a coordinated effort by North Korean IT workers to exploit GitHub for creating fake personas, enabling them to secure remote jobs in Japan and the United States. These individuals, posing as professionals from countries like Vietnam, Japan, and Singapore, primarily target roles in engineering and blockchain […]

The post North Korean IT Workers Exploit GitHub to Launch Global Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Dragon RaaS, a ransomware group known for its blend of hacktivism and cybercrime, has emerged as a significant player in the “Five Families” crimeware syndicate. This group, which includes ThreatSec, GhostSec, Blackforums, and SiegedSec, has been making waves since its inception in July 2024 as an offshoot of the Stormous group. Dragon RaaS markets itself […]

The post Dragon RaaS Leading “Five Families” Crimeware with New Initial Access & Exploitation Tactics appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Menlo Security, a leader in Secure Enterprise Browsers, has released its annual State of Browser Security Report, revealing a sharp rise in browser-based cyberattacks. The report highlights a 130% surge in zero-hour phishing attacks and a significant increase in the exploitation of generative AI (GenAI) platforms for fraudulent activities. Menlo Threat Intelligence analyzed over 752,000 […]

The post Zero-Hour Phishing Attacks Exploiting Browser Vulnerabilities Surge by 130% appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent investigations by the Halcyon RISE Team have uncovered a concerning trend in the ransomware landscape: the Babuk2 group is issuing extortion demands based on false claims. Despite announcing numerous attacks, there is no third-party confirmation or evidence from victims that these incidents have actually occurred. This strategy involves reusing data from earlier breaches to […]

The post Babuk2 Ransomware Issues Fake Extortion Demands Using Data from Old Breaches appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A significant malware operation, dubbed “DollyWay,” has been uncovered by GoDaddy Security researchers, revealing a sophisticated campaign that has compromised over 20,000 WordPress sites globally. This operation, which began in 2016, leverages a distributed network of compromised WordPress sites as Traffic Direction System (TDS) and Command and Control (C2) nodes. The malware’s latest iteration, DollyWay […]

The post Massive “DollyWay” Malware Attack Compromises 20,000+ WordPress Sites Worldwide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Recent reports indicate that hackers are actively trying to exploit two critical vulnerabilities in the Cisco Smart Licensing Utility. These vulnerabilities, identified as CVE-2024-20439 and CVE-2024-20440, were disclosed by Cisco in September. The first vulnerability involves a static credential issue, while the second is an information disclosure vulnerability related to excessive logging. Overview of the […]

The post Cisco Smart Licensing Utility Vulnerabilities Under Hacker Exploitation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

IBM has recently issued a critical security warning regarding vulnerabilities in its AIX operating system that could allow remote attackers to execute arbitrary commands. The vulnerabilities, identified as CVE-2024-56346 and CVE-2024-56347, were discovered in the IBM AIX nimesis NIM master service and the nimsh service SSL/TLS protection mechanisms. Affected Product The vulnerabilities impact versions 7.2 […]

The post IBM Warns of AIX Vulnerabilities Allowing Arbitrary Command Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Dell has issued several critical security alerts regarding vulnerabilities in its Secure Connect Gateway (SCG) products. These vulnerabilities pose significant risks to users, including potential data breaches and unauthorized access to sensitive information. This article will delve into the details of these vulnerabilities, their impact, and the necessary steps users can take to protect themselves. […]

The post Dell Alerts on Critical Secure Connect Gateway Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Computer Emergency Response Team of Ukraine (CERT-UA) has reported a series of targeted cyberattacks against employees of the defense-industrial complex and members of the Defense Forces of Ukraine. These attacks have been ongoing since at least the summer of 2024 and have escalated in recent months. The attackers are using the Signal messenger app […]

The post Signal Messenger Exploited in Targeted Attacks on Defense Industry Employees appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Babuk ransomware group has recently claimed responsibility for a sophisticated cyberattack on Orange, a leading global telecommunications company. According to an exclusive interview with SuspectFile.com, Babuk exploited a zero-day vulnerability in Orange’s systems to gain initial access to the company’s network. This vulnerability allowed them to exfiltrate sensitive data, which was later sold to […]

The post Babuk Ransomware Group Claims Attack on Telecommunication Firm Orange appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical vulnerability found in Edimax IC-7100 IP cameras. The alert centers on an OS command injection vulnerability due to improper input sanitization, which allows malicious actors to send specially crafted requests and achieve remote code execution on affected devices. This severe […]

The post CISA Alerts on Edimax IP Camera OS Command Injection Exploit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Chinese Advanced Persistent Threat (APT) group known as Salt Typhoon, also referred to as FamousSparrow, GhostEmperor, Earth Estries, and UNC2286, has been actively targeting critical sectors worldwide. This group has been particularly focused on telecommunications and government entities across the United States, the Asia-Pacific region, the Middle East, and South Africa since at least […]

The post Chinese “Salt Typhoon” Hackers Exploit Exchange Vulnerabilities to Target Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a serious vulnerability in the NAKIVO Backup and Replication software, known as CVE-2024-48248. This vulnerability allows attackers to exploit an absolute path traversal flaw, enabling them to read arbitrary files without authentication. The vulnerability resides in the Director Web Interface of the […]

The post CISA Warns of NAKIVO Backup Flaw Exploited in Attacks with PoC Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kali Linux, the renowned cybersecurity-focused Linux distribution, has just ushered in the new year with the release of Kali Linux 2025.1a. This update builds upon the existing features, offering myriad enhancements and improvements designed to give users a streamlined experience. Whether you’re already a seasoned Kali user or about to dive into the world of […]

The post Kali Linux 2025.1a Released: New Tools and Desktop Environment Upgrades appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Moving Beyond Detection to Real-Time, Automated Security Across Workloads, Cloud, and Infrastructure  SecPod, a global cybersecurity provider, has announced the General Availability of Saner Cloud, a Cloud-Native Application Protection Platform designed to provide automated remediation and workload security across multi-cloud environments. Unlike conventional security solutions that focus primarily on detection, Saner Cloud integrates security using […]

The post SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a significant discovery, PRODAFT’s security research team has identified two critical vulnerabilities in the mySCADA myPRO Manager, a widely used Supervisory Control and Data Acquisition (SCADA) management solution. These vulnerabilities, if exploited, could grant unauthorized access to industrial control networks, potentially leading to severe operational disruptions and financial losses. The vulnerabilities are classified as […]

The post mySCADA myPRO Manager RCE Vulnerabilities Allow Remote Attackers to Take Control of ICS Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors have increasingly been leveraging legitimate remote monitoring and management (RMM) software to infiltrate and navigate through networks undetected. RMM tools, such as AnyDesk, Atera Agent, MeshAgent, NetSupport Manager, Quick Assist, ScreenConnect, Splashtop, and TeamViewer, are widely used by organizations for essential IT tasks like system updates, asset management, and endpoint troubleshooting. However, their […]

The post Hackers Use RMM Tools to Maintain Persistence and Navigate Networks Undetected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.