GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

North Korean state-sponsored hacking groups, including Kimsuky (APT43) and Andariel (APT45), have significantly increased cyberattacks on South Korean construction and machinery sectors.  This surge aligns with Kim Jong-un’s “Local Development 20×10 Policy,” aimed at modernizing industrial facilities across North Korea.  In response, South Korea’s National Cyber Security Center (NCSC) and intelligence agencies have issued a […]

The post North Korean Hackers Exploit VPN Update Flaw To Breach Networks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

An attacker, identified as Yawixooo, leveraged a publicly accessible Jupyter Notebook honeypot as an initial access vector. The honeypot’s exposure to the internet-enabled Yawixooo to exploit it without requiring complex techniques.  Once gaining a foothold on the system, the attacker downloaded a new zip file (MD5: 42989a405c8d7c9cb68c323ae9a9a318) from filebin.net, which was only flagged as malicious […]

The post Panamorfi TCP flood DDoS Attack Targeting Jupyter Notebooks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Ransomware has infiltrated the IT systems of 40 French museums, including the renowned Louvre. The incident, which occurred on the night of August 3-4, 2024, was first detected by the director of information systems at the Grand Palais site. The director noticed unusual activity in the computer systems and promptly raised the alarm, signaling the […]

The post 40 French Museums IT Systems Hit by Ransomware Attack appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

 Mobile Guardian, a leading Mobile Device Management (MDM) vendor, experienced unauthorized access to its platform on August 4th. The incident has impacted iOS and ChromeOS devices enrolled globally in the Mobile Guardian system. What Happened On August 4th at 2 PM GMT, Mobile Guardian detected suspicious activity on its platform. The security team immediately responded […]

The post Mobile Device Management Vendor Mobile Guardian Hacked appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Singapore authorities have successfully intercepted and reclaimed over USD 40 million defrauded in a sophisticated business email compromise (BEC) scam. The operation, facilitated by INTERPOL’s Global Rapid Intervention of Payments (I-GRIP) mechanism, marks the largest-ever recovery of fraudulently obtained funds in Singapore’s history. The Scam Unveiled On 23 July 2024, a commodity firm based in […]

The post Authorities have Uncovered USD 40 Million from Hackers appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A threat actor has reportedly claimed responsibility for leaking a database belonging to SisaCloud, Thailand’s School Information System Advance. This alarming news was first reported by DailyDarkWeb on their social media platform, X.com, raising significant concerns about the security of educational data in Thailand. Details of the Alleged Leak The threat actor claims that the […]

The post Threat Actor Allegedly Claims Leak of SisaCloud Database appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity experts have uncovered a sophisticated Android spyware, LianSpy, targeting users to steal sensitive data. This spyware employs advanced evasion techniques, making it a significant threat to Android device users worldwide. How LianSpy Operates LianSpy begins its operation by determining if it runs as a system app, granting it automatic permissions. If not, it requests […]

The post New LianSpy Attacking Android Users to Steal Sensitive Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A threat actor has claimed responsibility for breaching Gregory’s Foods, a well-known supplier of frozen bread, bun, and cookie doughs, among other bakery products. The announcement was made on a dark web forum, where the alleged hacker stated that a 400GB database file from Gregory’s Foods is now up for sale. This breach has raised […]

The post Threat Actor Claiming Breach of Gregory’s Foods 400Gb Database appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Hackers often make use of fake AI editor websites for several illicit purposes with malicious intent.  Among their prime activities are deceiving users into providing personal information, downloading malware, making payments for fraudulent services, and many more. Recently, cybersecurity researchers at Trend Micro identified a sophisticated malvertising campaign that targeted social media users through a […]

The post Beware Of Fake AI Editor Website That Steals Your Login Credentials appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Fighting Ursa, a Russian APT, has employed a car sales phishing lure to distribute the HeadLace backdoor malware targeting diplomats since March 2024. This strategy mirrors previous campaigns by the group and other Russian threat actors.  The attack leveraged public, free infrastructure services and exploited user clicks on malicious content within the car advertisement.  Hackers […]

The post Hackers Infect Windows With Backdoor Malware Via “Car For Sale” Ad appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The notorious Mirai botnet has been observed exploiting a recently disclosed directory traversal vulnerability in Apache OFBiz. This Java-based framework, supported by the Apache Foundation, is used for creating ERP (Enterprise Resource Planning) applications, which are critical for managing sensitive business data despite being less prevalent than commercial alternatives. Vulnerability Details and Exploitation According to […]

The post Mirai Botnet Attacking Apache OFBiz Directory Traversal Vulnerability appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Attackers uploaded malicious Python packages targeting Raydium and Solana users to PyPI, leveraging a StackExchange post to distribute the malware.  The multi-stage malware stole sensitive data, drained cryptocurrency wallets, and established persistent backdoor access, bypassing Windows security protections, underscoring the vulnerability of software supply chains and the ineffectiveness of traditional endpoint security solutions against modern […]

The post Hackers Abused StackExchange Platform To Deliuver Malicious Python Package appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Mint-Stealer is a Malware-as-a-Service tool designed to exfiltrate sensitive data from compromised systems stealthily and targets a broad spectrum of data, including web credentials, cryptocurrency wallet details, gaming credentials, VPN configurations, messaging app data, and FTP client information.  Employing encryption and obfuscation, Mint-Stealer evades detection while actively stealing data. Distributed through dedicated websites and supported […]

The post Mint-stealer Targeting web browsers, VPN clients & messaging apps to Steal Logins appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The Exodus Market, a haven for exiled criminals, has grown to become a significant player in the black market economy. The user “ExodusMarket” originally announced Exodus Market for Logs on the Cracked forum on February 10, 2024, after it was formally launched at the end of January 2024. Twice, in March 2024 and July 16, […]

The post Exodus Underground Market Place Emerging As A Heaven For Cybercriminals appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

⁤Hackers often attack ISP service providers for several illicit purposes. The most significant ones are disrupting internet services, stealing sensitive data, and many more.  ⁤Besides this, such compromise also provides hackers with control over a vast number of connected devices, which significantly impacts the malicious activities of the threat actors positively. ⁤ Volexity discovered StormBamboo’s […]

The post Hackers Hijacked ISP Service Provider To Poison Software Updates appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The wide use and the huge user base of Android often lucrative the threat actors.  As threat actors often use Android malware to exploit vulnerabilities in the Android operating system.  This enables them to perform several illicit activities like stealing sensitive information, tracking user activity, and gaining unauthorized access to devices. Cleafy researchers recently detected […]

The post Beware Of New BingoMod Android Malware Steals Money & Formats Device appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have found a new way for hackers to steal sensitive information like passwords by eavesdropping on HDMI cables. This is a worrying development for computer users. ‘Researchers at Universidad de la República in Uruguay discovered that hackers can use artificial intelligence (AI) to decode signals from HDMI cables and see what’s displayed on […]

The post Researchers Details How Hackers Can Steal Passwords via HDMI Cables appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered vulnerability in Windows File Explorer has raised alarms within the cybersecurity community. Identified as CVE-2024-38100, this security flaw allows attackers to escalate privileges by exploiting a seemingly innocuous wallpaper feature. CVE-2024-38100 – Windows File Explorer Elevation of Privilege Vulnerability Released on July 9, 2024, CVE-2024-38100 is a critical vulnerability that Microsoft has […]

The post Leaked Wallpaper Vulnerability Exposes Windows Users to Privilege Escalation Attacks appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

The IRS-Criminal Investigation, the US Department of Justice (DOJ), and the Federal Bureau of Investigation (FBI), in partnership with the German Federal Criminal Police Office (BKA) and the Attorney General’s Office in Frankfurt, successfully seized the domain of the online cryptocurrency wallet Cryptonator. The takedown was due to the platform’s failure to implement appropriate anti-money […]

The post Authorities Seized Cryptonator Site & Charged the Admin appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft has addressed several critical vulnerabilities in its Chromium-based Edge browser. Users of the affected versions are strongly advised to update to the latest version to mitigate potential security risks. According to the Asec Ahnlab reports, the vulnerabilities were found in Microsoft Edge versions 127.0.6533.88 and 127.0.6533.89. These versions are based on the Chromium engine, […]

The post Microsoft Patched a Critical Edge Flaw that Led to Arbitrary Code Execution appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.