GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

A federal grand jury has indicted two Sudanese nationals, Ahmed Salah Yousif Omer, 22, and Alaa Salah Yusuuf Omer, 27. The pair are accused of operating Anonymous Sudan, a notorious cybercriminal group responsible for tens of thousands of Distributed Denial of Service (DDoS) attacks targeting critical infrastructure and government agencies globally. Unveiling the Cybercriminal Network […]

The post Authorities Indicted Two Anonymous Sudan Hackers Over Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A company has fallen victim to a cyberattack after unknowingly hiring a North Korean cybercriminal as a remote IT worker. The unidentified firm, based in the UK, US, or Australia, discovered the breach after the hacker downloaded sensitive data and issued a ransom demand. The incident highlights the growing threat of North Korean operatives infiltrating […]

The post Organization Hacked Following Accidental Hiring of North Korean Remote IT Worker appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft’s customers are under constant cyber assault, facing millions of attacks daily from various threat actors as nation-states and cybercrime gangs are increasingly collaborating, escalating the severity and frequency of attacks.  They had observed a concerning trend of state-affiliated actors outsourcing cyber operations to criminal groups, which is evident in various activities, such as financial […]

The post Microsoft Customers Facing 600 Million Cyber Attack Launched Every Day appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

EDRSilencer, a red team tool, interferes with EDR solutions by blocking network communication for associated processes using the WFP, which makes it harder to identify and remove malware, as EDRs cannot send telemetry or alerts. The code demonstrates a technique where malware can evade detection by blocking EDR traffic, making it harder to identify and […]

The post Hackers Abuse EDRSilencer Red Team Tool To Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has announced a significant security update for its Chrome browser, addressing 17 vulnerabilities in the latest build. The update, which affects the Stable and Extended Stable channels, will roll out over the coming days and weeks for Windows, Mac, and Linux users. Update Details The Stable channel has been updated to versions 130.0.6723.58/.59 for […]

The post Chrome Security Update, 17 Vulnerabilities Patched appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) released two critical Industrial Control Systems (ICS) advisories on October 15, 2024. These advisories provide essential information about current security issues, vulnerabilities, and potential exploits affecting ICS. The advisories focus on vulnerabilities in Siemens Siveillance Video Cameras and Schneider Electric Data Center Expert software. Analyse Any Suspicious Links […]

The post CISA Releases ICS Advisories to Mitigate Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Horus Protector crypter is being used to distribute various malware families, including AgentTesla, Remcos, Snake, NjRat, and others, whose primarily spread through archive files containing VBE scripts, which are encoded VBS scripts.  Once executed, these scripts decode and execute the malicious payload, as this new distribution method makes detection and prevention more challenging due […]

The post HORUS Protector Delivering AgentTesla, Remcos, Snake, NjRat Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cerberus Android banking trojan, which gained notoriety in 2019 for its ability to target financial and social media apps, has continued to evolve and spread through various forks and variants.  Recent research has uncovered a new campaign, dubbed ErrorFather, which leverages the Cerberus source code and utilizes a multi-stage dropper mechanism to deploy the […]

The post ErrorFather Hackers Attacking & Control Android Device Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A group of hackers reportedly sells sensitive data stolen from Cisco Systems, Inc. The breach, allegedly carried out by a collective known as IntelBroker in collaboration with EnergyWeaponUser and zjj, has raised significant concerns across the tech industry. Details of the Breach According to a post on social media platform X by user H4ckManac, the […]

The post Hackers Allegedly Selling Data Stolen from Cisco appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in Fortinet’s FortiGate SSLVPN appliances, CVE-2024-23113, has been actively exploited in the wild. This format string flaw vulnerability has raised significant concerns due to its potential for remote code execution. The flaw allows attackers to control format strings, leading to unauthorized access and manipulation of network border appliances without requiring credentials or […]

The post Fortigate SSLVPN Vulnerability Exploited in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Splunk has disclosed multiple vulnerabilities affecting its Enterprise product, which could allow attackers to execute remote code. These vulnerabilities, primarily affecting Windows installations, highlight the critical need for organizations to update and secure their systems promptly. Overview of the Security Advisories Splunk, a leading provider of data analytics and monitoring solutions, has released a series […]

The post Splunk Enterprise Vulnerabilities let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Earth Simnavaz, an Iranian state-sponsored cyber espionage group, has recently intensified its attacks on critical infrastructure in the UAE and wider Gulf region.  The group employs sophisticated techniques to gain unauthorized access and exfiltrate sensitive data, such as using a new backdoor to steal credentials via on-premises Microsoft Exchange servers by exploiting vulnerabilities like CVE-2024-30088 […]

The post OilRig Hackers Exploiting Microsoft Exchange Server To Steal Login Details appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Researchers recently analyzed a CoreWarrior malware sample, which spreads aggressively by creating numerous copies and connecting to various IP addresses. It establishes multiple backdoor connections and monitors user activity through Windows UI element hooks, which poses a significant security risk as it can compromise system integrity and steal sensitive data. The malware is a UPX-packed […]

The post CoreWarrior Malware Attacking Windows Machines From Dozens Of IP Address appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The recent discovery of the TrickMo Banking Trojan variant by Cleafy has prompted further investigation, where researchers have identified 40 variants, 16 droppers, and 22 active Command and Control servers associated with this threat.  These variants employ advanced techniques like zip file manipulation and obfuscation to evade detection. Despite the lack of IOC release, the […]

The post TrickMo Malware Targets Android Devices to Steal Unlock Patterns and PINs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical security vulnerability has been discovered in the popular Java framework pac4j. The vulnerability specifically affects versions before 4.0 of the pac4j-core module. This vulnerability, identified as CVE-2023-25581, exposes systems to potential remote code execution (RCE) attacks due to a flaw in the deserialization process. Vulnerability Details – CVE-2023-25581 The issue stems from a […]

The post pac4j Java Framework Vulnerable to RCE Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Scammers use sophisticated AI technology to impersonate tech giants like Google, aiming to take over unsuspecting users’ Gmail accounts. A recent incident highlights these fraudsters’ cunning tactics, underscoring the need for heightened vigilance. The Initial Contact: A Suspicious Notification The trouble began with an unexpected notification. The user received a prompt to approve a Gmail […]

The post Beware of Fake AI Scam calls that Takeover your Gmail Account appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A security vulnerability in Zendesk, a widely used customer service tool, has been uncovered. This flaw allowed attackers to access support tickets from any company using Zendesk, posing significant risks to sensitive information. Zendesk initially dismissed the vulnerability, which involved email spoofing, but later forced the company to implement critical security fixes. Here’s a detailed […]

The post Zendesk Email Spoofing Flaw Let Attackers Access Support Tickets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

18 individuals and entities have been charged with widespread fraud and manipulation within the cryptocurrency markets. The charges, unsealed in Boston, target leaders of four cryptocurrency companies, four financial services firms known as “market makers,” and various employees. This case marks a significant step in addressing fraudulent activities in the rapidly evolving digital currency landscape. […]

The post 18 Individuals Charged for Widespread Manipulation Cryptocurrency Markets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat actors are leveraging a newly discovered deepfake tool, ProKYC, to bypass two-factor authentication on cryptocurrency exchanges, which is designed specifically for NAF (New Account Fraud) attacks and can create verified but synthetic accounts by mimicking facial recognition authentication. By overcoming these security measures, threat actors can engage in money laundering, create mule accounts, and […]

The post Threat Actor ProKYC Selling Tools To Bypass Two-Factor Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical use-after-free vulnerability affecting Firefox and Firefox Extended Support Release (ESR) is being actively exploited in cyberattacks. With a CVSS base score of 9.8, the flaw is identified as Use-after-free in the Animation timeline component tracked as CVE-2024-9680 reported by Damien Schaeffer from ESET.“ An attacker was able to achieve code execution in the […]

The post Mozilla Warns Of Firefox Zero-Day Actively Exploited In Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.