GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The RansomHub ransomware group tracked as Water Bakunawa, employs targeted spear-phishing to exploit the Zerologon vulnerability, allowing them to gain unauthorized access to networks, affecting various industries and critical infrastructure sectors, demanding ransom payments for data release.  The group’s recent integration of EDRKillShifter, a tool designed to evade detection and disrupt security processes, poses a […]

The post RansomHub Ransomware Using Multiple Techniques To Disable EDR And Antivirus appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The original threat actor behind the Octo malware family has released a new variant, Octo2, with enhanced stability for remote action capabilities to facilitate Device Takeover attacks.  This new variant targets European countries and employs sophisticated obfuscation techniques, including the Domain Generation Algorithm (DGA), to evade detection and ensure the Trojan remains undetected. The Exobot […]

The post Octo2 Android Malware Attacking To Steal Banking Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kryptina RaaS, a free and open-source RaaS platform for Linux, initially struggled to attract attention. Still, after a Mallox affiliate’s staging server was leaked in May 2024, Kryptina’s modified version, branded Mallox v1.0, gained prominence.  The research examines the data exposed in the leak, highlighting differences between the original Kryptina RaaS (v2.2) and Mallox v1.0 […]

The post New Mallox Ransomware Linux Variant Attacking Enterprise Linux Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers observed two distinct instances where users were inadvertently led to malicious websites after conducting Google searches for video streaming services. These victims were redirected to malicious URLs that employed a deceptive tactic while attempting to access sports or movie content. The victims were presented with a prompt requesting human verification, which, upon completion, executed […]

The post Beware Of Fake Verify You Are A Human Request That Delivers Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korean IT workers, disguised as non-North Koreans, infiltrate various industries to generate revenue for their regime, evading sanctions and funding WMD programs by exploiting privileged access to enable cyber intrusions.  Facilitators, often non-North Koreans, assist these workers by laundering money, hosting company laptops, using stolen identities, and accessing international financial systems, which help the […]

The post Google Warns Of North Korean IT Workers Have Infiltrated The U.S. Workforce appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The threat actor, formed in 2023, specializes in ransomware attacks targeting Russian government organizations. It encrypts and deletes victim data, exfiltrates sensitive information, and aims to inflict maximum damage on critical assets. The threat actor likely scans IP address ranges in Russia to identify VPN servers and applications accessible from the internet that could serve […]

The post TWELVE Threat Attacks Windows To Encrypt Then Deleting Victims’ Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Runtime environments offer a flexible way to customize Automation Account Runbooks with specific packages. While base system-generated environments can’t be directly modified, they can be indirectly changed by adding packages to the old experience and then switching to the new Runtime Environments feature.  It could potentially be exploited by attackers who create new runtime environments […]

The post Researchers Backdoored Azure Automation Account Packages And Runtime Environments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The RomCom malware family, particularly its SnipBot variant, has evolved into a sophisticated threat capable of ransomware, extortion, and targeted credential gathering. It employs various attack methods, including PDF-based downloaders and executable payloads, to compromise victim systems.  The threat actors behind RomCom have been active since at least 2022 and utilize stolen or fraudulently obtained […]

The post Hackers Weaponizing PDF files To Deliver New SnipBot Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

TeamTNT is targeting CentOS VPS clouds with SSH brute force attacks. It has uploaded a malicious script that disables security, deletes logs, and modifies system files to kill existing miners, remove Docker containers, and redirect DNS to Google servers. The script stealthily installs the Diamorphine rootkit to gain root privileges and maintain persistent control by […]

The post TeamTNT Hackers Attacking VPS Servers Running CentOS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers are tracking a Russian threat actor deploying domains involved in crypto scams targeting the US Presidential Election and tech brands. The scams offer double crypto returns for deposits and are designed to deceive users into sending coins to attacker-controlled wallets. The research identified numerous websites promoting fraudulent giveaways featuring high-profile US individuals and brands, […]

The post Russian Hackers Registering Domains Targeting US Tech Brands appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers from BitSight TRACE have uncovered multiple 0-day vulnerabilities in Automated Tank Gauge (ATG) systems, which are integral to managing fuel storage tanks across various critical infrastructures. These vulnerabilities in six ATG systems from five vendors pose significant threats to public safety and economic stability. The flaws could potentially be exploited by malicious actors […]

The post Multiple 0-Day Flaws in Automated Tank Gauge Systems Threaten Critical Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Franklin County, Kansas, has fallen victim to a ransomware attack that compromised the sensitive data of nearly 30,000 residents. The breach occurred on May 19, 2024, and was not discovered until August 29, 2024. According to a report submitted by Matthew Meade, an attorney with Eckert Seamans Cherin & Mellott and legal counsel for Franklin […]

The post Kansas County Ransomware Attack Exposed Nearly 30,000 Residents’ Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

MoneyGram, a leading global money transfer service, has confirmed that it was the victim of a cyberattack, following a significant network outage that disrupted customer services worldwide. The company initially reported an issue with connectivity across several of its systems, which led to widespread concern and inconvenience for users relying on its services for financial […]

The post MoneyGram Confirms Cyberattack Following Outage appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco disclosed a critical vulnerability identified as CVE-2024-20439, affecting its Smart Licensing Utility. An independent researcher discovered this vulnerability through reverse engineering. It involves a hardcoded static password that could allow attackers to gain unauthorized access and control over affected devices. The vulnerability highlights significant security concerns for organizations using Cisco’s licensing systems. Target Application […]

The post Researcher Details Cisco Smart Licensing that Lets Attacker Control Device appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers have uncovered a massive data breach at MC2 Data, a prominent background check firm. The breach has exposed sensitive information of over 100 million US citizens, raising serious concerns about data privacy and security. Background Check Firms Under Scrutiny MC2 Data is part of an industry that compiles and analyzes data from various public […]

The post MC2 Data leak Exposes 100 million+ US Citizens Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are now impersonating company Human Resources (HR) departments to deceive employees into revealing sensitive information. This latest phishing tactic highlights the increasing sophistication of cyber threats, leveraging trust and urgency to exploit corporate environments. In this article, we dissect the mechanics of this phishing attempt and provide insights to help employees recognize and avoid […]

The post Hackers Mimic as Company’s HR to Trick Employees appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apple’s latest operating system update, macOS 15, also known as Sequoia, has disrupted the functionality of several prominent security tools. Users and developers have taken to social media and Mac-focused Slack channels to express their frustration over the issues caused by the update. Security tools from companies like CrowdStrike, SentinelOne, Microsoft, and others have reportedly […]

The post macOS Sequoia Update Breaks Multiple Security Tools appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

FreeBSD has disclosed a critical remote code execution (RCE) vulnerability affecting its bhyve hypervisor. This vulnerability, CVE-2024-41721, could allow attackers to execute malicious code on the host system. The advisory, which was announced on September 19, 2024, credits Synacktiv with discovering the flaw. CVE-2024-41721 – Vulnerability Details As per a report by FreeBSD, the vulnerability […]

The post FreeBSD RCE Vulnerability Let Attackers Execute Malicious Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued six advisories concerning vulnerabilities: These advisories highlight critical industrial control system vulnerabilities. Rockwell Automation’s RSLogix 5 and RSLogix 500 software Rockwell Automation’s RSLogix 5 and RSLogix 500 software are vulnerable due to insufficient verification of data authenticity, identified as CVE-2024-7847. This vulnerability has a CVSS v4 […]

The post CISA Releases Six Advisories for Industrial Control Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A hacking group has allegedly claimed responsibility for breaching the Dell employee database. The claim was made public on a well-known hacking forum, where the group asserted that they had accessed sensitive information belonging to approximately 10,800 Dell employees and partners. The breach reported by HackManac in the X platform occurred in September 2024 and […]

The post Hackers Allegedly Claim Breach of Dell Employee Database appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.