GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A sophisticated remote access trojan (RAT) dubbed SnowDog has surfaced on underground cybercrime forums, prompting alarms among cybersecurity experts. Advertised as a tool for “corporate espionage and advanced intrusions,” the malware is being sold by an unidentified threat actor with claims of stealth, evasion, and remote control capabilities. The SnowDog RAT: Features and Risks The seller claims […]

The post Hackers Selling SnowDog RAT Malware With Remote Control Capabilities Online appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In one of the most significant operations against child sexual exploitation in recent history, authorities have announced the shutdown of “Kidflix,” one of the world’s largest platforms for the distribution of child sexual abuse material (CSAM). The meticulously planned international operation, codenamed Operation Stream, was led by the State Criminal Police of Bavaria (Bayerisches Landeskriminalamt) and […]

The post Authorities Shut Down Kidflix Child Abuse Platform in Major Takedown appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Over 39 million API keys, credentials, and other sensitive secrets were exposed on GitHub in 2024, raising considerable alarm within the developer community and enterprises globally. The scale and impact of this leak have underscored the growing risks tied to improperly handled credentials and highlighted the urgent need for robust security practices. GitHub, the world’s […]

The post Massive GitHub Leak: 39M API Keys & Credentials Exposed – How to Strengthen Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Analyzing malware has become increasingly challenging, especially with the growing popularity of programming languages like Golang. Golang, or Go, has captivated developers for its extensive features but has also proven to be an attractive choice for malware authors, thanks to its embedded libraries, sizable binaries, and potential for obfuscation. To combat these challenges, Volexity has […]

The post GoResolver: A Powerful New Tool for Analyzing Golang Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has disclosed critical vulnerabilities in its Smart Licensing Utility software, identified as CVE-2024-20439 and CVE-2024-20440, which could allow unauthenticated, remote attackers to gain administrative access or collect sensitive information from compromised systems. These flaws, rated with a severity score of 9.8 in the Common Vulnerability Scoring System (CVSS), pose significant security risks to organizations […]

The post Cisco Smart Licensing Utility Flaws Allowed Attackers to Gain Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability in Verizon’s Call Filter app for iOS has been discovered, allowing unauthorized access to customer call logs. This flaw allowed any individual with the requisite technical knowledge to retrieve incoming call data—complete with timestamps—for any Verizon phone number, posing serious risks to privacy and safety. The Vulnerability Unveiled The Verizon Call Filter app […]

The post Verizon Call Filter App Vulnerability Exposed Call Log Data of Customers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Brinker, an innovative narrative intelligence platform dedicated to combating disinformation and influence campaigns, has been recognized as one of the “10 Most Promising Defense Tech Startups of 2025” by Défense Israel and Robel Innovations. This distinction underscores Brinker’s groundbreaking approach to safeguarding governments, enterprises, and NGOs from increasingly sophisticated narrative-based threats. Brinker’s proprietary technology identifies malicious […]

The post Brinker Named Among “10 Most Promising Defense Tech Startups of 2025” appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation by cybersecurity researchers has uncovered a large-scale malware campaign leveraging the DeepSeek LLM and popular remote desktop applications to distribute the Trojan-Downloader.Win32.TookPS malware. The attackers targeted both individual users and organizations by disguising malicious software as legitimate business tools, including UltraViewer, AutoCAD, and SketchUp. Malicious Infrastructure and Infection Chain The TookPS malware […]

The post Hackers Use DeepSeek and Remote Desktop Apps to Deploy TookPS Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent malware campaign has been observed targeting the First Ukrainian International Bank (PUMB), utilizing a stealthy malware loader, Emmenhtal, in conjunction with the SmokeLoader malware. This campaign demonstrates advanced tactics by financially motivated threat actors to distribute infostealers like CryptBot and Lumma Stealer. The attack chain begins with weaponized 7z archives and culminates in […]

The post SmokeLoader Malware Uses Weaponized 7z Archives to Deliver Infostealers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly discovered malware, dubbed Trojan.Arcanum, is targeting enthusiasts of tarot, astrology, and other esoteric practices. Disguised as a legitimate fortune-telling application, this Trojan infiltrates devices to steal sensitive data, manipulate users through social engineering, and even deploy cryptocurrency mining software. The malware is distributed via websites dedicated to mystical practices, masquerading as a harmless […]

The post New Malware Targets Magic Enthusiasts to Steal Logins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated phishing campaign orchestrated by a Russian-speaking threat actor has been uncovered, revealing the abuse of Cloudflare services and Telegram for malicious purposes. Researchers at Hunt.io have identified this new wave of attacks, which employs Cloudflare-branded phishing pages and advanced tactics to evade detection. The campaign utilizes Cloudflare’s Pages.dev and Workers.dev platforms typically used […]

The post Hackers Exploit Cloudflare for Advanced Phishing Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated malware campaign has compromised over 1,500 PostgreSQL servers, leveraging fileless techniques to deploy cryptomining payloads. The attack, identified by Wiz Threat Research and attributed to the threat actor group JINX-0126, exploits publicly exposed PostgreSQL instances configured with weak or default credentials. The attackers utilize these vulnerabilities to execute XMRig-C3 cryptominers without leaving detectable […]

The post Over 1,500 PostgreSQL Servers Hit by Fileless Malware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mozilla has officially launched Firefox 137 with crucial security fixes aimed at addressing several high-severity vulnerabilities reported by security researchers. As part of its April 1, 2025, Mozilla Foundation Security Advisory (MFSA 2025-20), the foundation detailed three significant Common Vulnerabilities and Exposures (CVEs), which could have permitted attackers to exploit users’ machines through various means, […]

The post Firefox 137 Launches with Patches for High-Severity Security Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A privilege escalation vulnerability in Google Cloud Platform (GCP), dubbed “ImageRunner,” was recently discovered and fixed. The flaw, which Tenable Research brought to light, potentially allowed attackers to exploit Google Cloud Run permissions and access sensitive data stored in private container images. Discovering the ImageRunner Vulnerability The vulnerability hinged on improper permission handling for identities […]

The post Google Cloud Platform Vulnerability Exposes Sensitive Data to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

French antitrust regulators have imposed a hefty fine of €150 million ($162.4 million) on tech giant Apple for abusing its dominant position in mobile app advertising through its App Tracking Transparency (ATT) tool. The ruling marks the first fine by regulators globally targeting Apple’s ATT feature, which controls user tracking permissions for third-party apps on […]

The post Apple Fined $162 Million by France Authorities for Mobile Ad Market Domination appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security alert has been issued to WordPress site administrators following the discovery of two high-severity vulnerabilities in the “WP Ultimate CSV Importer” plugin. With over 20,000 active installations, the plugin’s flaws pose a significant risk to affected websites, potentially leading to complete site takeovers by attackers. CVE Identified: File Upload and Deletion Exploits […]

The post 20,000 WordPress Sites at Risk of File Upload & Deletion Exploits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybersecurity landscape has witnessed a concerning development with the emergence of “Prince Ransomware,” an open-source ransomware builder that was freely accessible on GitHub until recently. This tool, written in the Go programming language, has been exploited by cybercriminals to launch sophisticated ransomware attacks with minimal technical expertise. The recent attack on Mackay Memorial Hospital […]

The post Prince Ransomware – An Automated Open-Source Ransomware Builder Freely Available on GitHub appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybersecurity researchers have identified a growing trend in phishing attacks leveraging QR codes, a tactic known as “quishing.” These attacks exploit the widespread use of smartphones to deceive users into exposing sensitive credentials, particularly targeting Microsoft accounts. According to recent findings, attackers are embedding malicious URLs within QR codes to bypass traditional security measures and […]

The post QR Code Phishing (Quishing) Attack Your Smartphones To Steal Microsoft Accounts Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

North Korean IT workers have intensified their global operations, expanding their employment footprint across Europe to infiltrate corporate networks and generate revenue for the regime. According to the latest report by Google Threat Intelligence Group (GTIG), these workers pose as legitimate remote employees, leveraging advanced technical skills and deceptive tactics to gain access to sensitive […]

The post North Korea IT Workers Expand Their Employment Across Europe To Infiltrate the Company Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Israeli Internet Association has issued a public warning about a surge in cyberattacks targeting Telegram accounts in Israel. The campaign, traced to hackers in Bangladesh and Indonesia, exploits vulnerabilities in voicemail systems to hijack accounts and, in some cases, register new ones using phone numbers of individuals who have never used Telegram, including minors. […]

The post Hackers Hijack Telegram Accounts via Default Voicemail Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.