A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver Fox, has been uncovered, targeting healthcare services in North America. The attackers exploited Philips DICOM Viewer software to deploy malicious payloads, including a backdoor remote access tool (RAT), a keylogger, and a crypto miner. This campaign highlights the evolving tactics of […]
The post Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group has been detected, targeting government and military entities in Ukraine and opposition groups in Belarus. The campaign, active since late 2024, employs weaponized Excel (XLS) files embedded with malicious macros to deliver malware payloads, underscoring the evolving sophistication of state-sponsored cyber-espionage […]
The post Ghostwriter Malware Targets Government Organizations with Weaponized XLS File appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its initial appearance in November 2024. Known for encrypting files with the .lcryx extension and demanding $500 in Bitcoin for decryption, this ransomware has evolved with advanced techniques to lock down Windows systems and evade detection. Disabling System Tools and Elevating Privileges […]
The post LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Recent cybersecurity investigations have uncovered a sophisticated technique employed by threat actors to evade detection during malware distribution. Attackers are leveraging ephemeral port 60102, typically reserved for temporary communications, as a service port for covert malware transmission. This approach bypasses traditional monitoring systems, which often focus on scanning standard service ports such as 80 or […]
The post Threat Actors Using Ephemeral Port 60102 for Covert Malware Communications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.