GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

The AhnLab Security Intelligence Center (ASEC) has uncovered a new cyberattack campaign leveraging the LummaC2 malware, which is being distributed under the guise of a cracked version of Total Commander. Total Commander is a widely used Windows file management tool offering features like advanced search, folder synchronization, and FTP/SFTP support. While the legitimate software provides […]

The post Cybercriminals Impersonate Windows “Commander Tool” to Launch LummaC2 Malware Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A malicious Android application, Finance Simplified (package: com.someca.count), has been identified on the Google Play Store, targeting Indian users under the guise of a financial management tool. The app, which claims to offer an EMI calculator, is instead a sophisticated malware platform facilitating predatory lending, data theft, and extortion. Rapid Spread and Exploitative Practices The […]

The post Android App on Google Play Targets Indian Users to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent investigation by Kaspersky ICS CERT has uncovered a sophisticated cyberattack targeting industrial organizations across the Asia-Pacific region, particularly those in Taiwan, Malaysia, China, Japan, Thailand, South Korea, Singapore, the Philippines, Vietnam, and Hong Kong. The attackers are using a highly advanced version of the FatalRAT malware, delivered through a complex multi-stage payload framework […]

The post Industrial Organizations Under Siege: Chinese Hackers Wield Advanced FatalRAT Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A security researcher has uncovered critical vulnerabilities in Eight Sleep’s internet-connected smart beds, revealing exposed Amazon Web Services (AWS) credentials, remote SSH backdoors, and potential access to users’ entire home networks. The findings underscore growing concerns about IoT device security as consumers increasingly adopt connected appliances for everyday use. Researcher Discovers AWS Keys and Remote […]

The post Smart Bed Security Flaw Lets Hackers Access Other Network Devices appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apple has discontinued its Advanced Data Protection (ADP) feature for UK users following a legal demand from the British government to access encrypted user data. The move marks a pivotal moment in the ongoing global debate over privacy rights and national security, with critics warning of far-reaching implications for consumer security and international tech policy. […]

The post Apple Removes Advanced Data Protection (ADP) for UK Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Wireshark Foundation has announced the release of Wireshark 4.4.4, the latest iteration of the world’s most widely used network protocol analyzer. This update focuses on enhancing stability, refining protocol dissectors, and addressing critical security vulnerabilities, cementing Wireshark’s position as an indispensable tool for network professionals and researchers. Security and Stability Enhancements The release addresses […]

The post Wireshark 4.4.4 Released – Explore the Latest Features! appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cryptocurrency sector faced one of its most significant security breaches this year as stablecoin banking platform @0xinfini fell victim to a sophisticated cyberattack. Hackers drained 49.5 million USD Coin ($USDC) from the platform’s reserves, triggering immediate market turbulence and raising urgent questions about the security infrastructure of decentralized finance (DeFi) protocols. The stolen funds […]

The post Stablecoin Bank Hit by Cyberattack, Loses $49.5M to Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, has emerged as a significant threat within the cybercrime ecosystem. First identified in October 2023 on Russian-language forums, its distribution expanded to English-speaking criminal platforms by mid-2024. This malware operates as part of a Malware-as-a-Service (MaaS) model, allowing threat actors to exploit compromised systems for financial gain. Its […]

The post GhostSocks Malware Uses SOCKS5 Proxy to Evade Detection Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a swift and highly coordinated attack, LockBit ransomware operators exploited a critical remote code execution vulnerability (CVE-2023-22527) in Atlassian Confluence servers, targeting an exposed Windows server. This vulnerability, rated CVSS 10.0, enabled unauthenticated attackers to execute arbitrary commands by injecting malicious Object-Graph Navigation Language (OGNL) expressions into improperly sanitized template files. The attack commenced […]

The post LockBit Ransomware Strikes: Exploiting a Confluence Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated phishing campaign impersonating OpenAI’s ChatGPT Premium subscription service has surged globally, targeting users with fraudulent payment requests to steal credentials. Cybersecurity firm Symantec recently identified emails spoofing ChatGPT’s branding, urging recipients to renew a fictional $24 monthly subscription. The emails, marked with subject lines like “Action Required: Secure Continued Access to ChatGPT with a […]

The post Fake ChatGPT Premium Phishing Scam Spreads to Steal User Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical zero-day vulnerability in Parallels Desktop virtualization software has been publicly disclosed after seven months of unresolved reporting, enabling attackers to escalate privileges to the root level on macOS systems. The proof-of-concept (PoC) exploit code demonstrates two distinct bypass methods that circumvent existing patches for CVE-2024-34331, a previously addressed privilege escalation flaw. Technical Overview […]

The post Parallels Desktop 0-Day Exploit Enables Root Privileges – PoC Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly disclosed vulnerability in the Exim mail transfer agent (CVE-2025-26794) has sent shockwaves through the cybersecurity community, revealing a critical SQL injection flaw that enables attackers to compromise email systems and manipulate underlying databases.  The vulnerability, confirmed in Exim Version 4.98 installations using SQLite for hints databases, represents one of the most severe email […]

The post Exim Mail Transfer Vulnerability Allows Attackers to Inject Malicious SQL appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In what has become the largest cryptocurrency theft in history, hackers infiltrated Bybit’s Ethereum cold wallet on February 21, 2025, siphoning approximately 401,346 ETH valued at $1.46 billion. The breach, attributed to North Korea’s Lazarus Group, exploited vulnerabilities in Bybit’s multisignature wallet interface, redirecting funds through a sophisticated smart contract manipulation. While Bybit assured users […]

The post Biggest Crypto Hack in History – Hackers Stolen $1.46 Billion Worth Crypto From Bybit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have disclosed critical details about CVE-2025-20029, a command injection vulnerability in F5’s BIG-IP Traffic Management Shell (TMSH) command-line interface. The flaw enables authenticated attackers with low privileges to bypass security restrictions, execute arbitrary commands, and gain root-level access to vulnerable systems. A proof-of-concept (PoC) exploit demonstrating remote code execution was released on February 24, 2025, raising […]

The post PoC Exploit Released for F5 BIG-IP Command Injection Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google Cloud has unveiled a critical cybersecurity upgrade: quantum-safe digital signatures via its Key Management Service (Cloud KMS), now available in preview. This move aligns with the National Institute of Standards and Technology’s (NIST) 2024 post-quantum cryptography (PQC) standards, offering developers tools to safeguard encryption against future quantum threats. Quantum-Resistant Signatures Enter the Mainstream Google’s latest update […]

The post Google Introduces Quantum-Safe Digital Signatures in Cloud KMS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly identified malware, dubbed Zhong Stealer, has emerged as a significant threat to the fintech and cryptocurrency sectors. Any.run researchers discovered zhong malware during a phishing campaign between December 20 and 24, 2024, the malware exploits customer support platforms like Zendesk to infiltrate organizations. The attackers masquerade as customers, leveraging social engineering tactics to […]

The post New Zhong Stealer Malware Exploit Zendesk to Attack Fintech and Cryptocurrency appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a recent development, the SPAWNCHIMERA malware family has been identified exploiting the buffer overflow vulnerability CVE-2025-0282 in Ivanti Connect Secure, as confirmed by JPCERT/CC. This vulnerability, disclosed in January 2025, had already been actively exploited since late December 2024, prior to its public announcement. The malware, an evolved variant of the SPAWN family, integrates […]

The post SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by Applying a Critical Fix appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A significant vulnerability in Sitevision CMS, versions 10.3.1 and earlier, has been identified, allowing attackers to extract private keys used for signing SAML authentication requests. The flaw, tracked as CVE-2022-35202, stems from the use of a Java keystore accessible via WebDAV and protected by an auto-generated, low-complexity password. This vulnerability could potentially enable attackers to […]

The post Sitevision Auto-Generated Password Vulnerability Lets Hackers Steal Signing Key appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Chinese cybersecurity entities have accused the U.S. National Security Agency (NSA) of orchestrating a cyberattack on Northwestern Polytechnical University, a prominent Chinese institution specializing in aerospace and defense research. The allegations, published by organizations such as Qihoo 360 and the National Computer Virus Emergency Response Center (CVERC), claim that the NSA’s Tailored Access Operations (TAO) […]

The post NSA Allegedly Hacked Northwestern Polytechnical University, China Claims appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The ACRStealer malware, an infostealer disguised as illegal software such as cracks and keygens, has seen a significant increase in its distribution since the beginning of 2025. Initially distributed in limited volumes in mid-2024, this malware has now gained traction, with February’s activity levels matching those of January, signaling a sharp upward trend. Security researchers […]

The post ACRStealer Malware Abuses Google Docs as C2 to Steal Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.