GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

IcePeony, a China-nexus APT group, has been active since 2023, targeting India, Mauritius, and Vietnam by exploiting SQL injection vulnerabilities to compromise systems using webshells and backdoors, leveraging a custom IIS malware called IceCache. The attackers accidentally exposed a server containing sensitive data, including a zsh_history file that revealed their detailed attack timeline and techniques. […]

The post IcePeony Hackers Exploiting Public Web Servers To Inject Webshells appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Federal Bureau of Investigation (FBI) has apprehended Eric Council Jr., a 25-year-old resident of Athens, Alabama, for his alleged involvement in the unauthorized takeover of the U.S. Securities and Exchange Commission’s (SEC) X account in January 2024. The incident caused a brief but substantial fluctuation in Bitcoin’s value, highlighting the potential impact of social […]

The post FBI Arrested Hacker Behind the Takeover of the U.S. SEC X account appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated malware loader known as Bumblebee has resurfaced, posing a significant threat to corporate networks worldwide. Cybersecurity researchers at Netskope Threat Labs have uncovered a new infection chain linked to Bumblebee. This marks its first appearance since Operation Endgame, a major Europol-led crackdown on malware botnets in May 2024. Bumblebee, first identified by Google’s […]

The post Hackers Use Bumblebee Malware to Gain Access to Corporate Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers impersonated the cybersecurity firm ESET to distribute destructive wiper malware. The campaign, which began on October 8, 2024, utilized phishing emails that appeared to originate from ESET’s legitimate domain. The malicious emails, purportedly from “ESET’s Advanced Threat Defense Team,” warned recipients that state-backed attackers were targeting their devices. The emails offered a download link […]

The post Hackers Mimic as ESET to Deliver Wiper Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A 43-year-old Italian-Australian man, one of the FBI’s most wanted hackers, was apprehended at Milan’s Malpensa Airport after evading capture for over three years. The arrest, carried out by Milan State Police officers, marks a significant victory in the global fight against cybercrime. The suspect, whose identity remains undisclosed, is alleged to be a key […]

The post FBI’s Most Wanted Hacker Arrested in Malpensa appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Fair Vote Canada has disclosed a data leak affecting approximately 34,000 email addresses. While the organization assures that no financial information was compromised, the incident has raised concerns about data security practices. Fair Vote Canada revealed that the breach involved data from 2020, which inadvertently became publicly accessible via an external website. The exposed information […]

The post Fair Vote Canada Data Leak: 34k Email Addresses Leaked appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ukrainian Roosh Ventures has invested in the French freelance platform Jump. This was announced by tech entrepreneur and co-founder of the Roosh investment fund, Serhiy Tokarev, on his LinkedIn page: “Thrilled to announce that Roosh Ventures is backing Jump, a platform that’s changing the game for freelancers.”  Jump is a universal platform aiming to make freelancing simpler […]

The post Serhiy Tokarev Reveals Roosh’s Investment in the French Freelance Platform appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A critical vulnerability in SolarWinds Web Help Desk has been identified. It could allow attackers to execute arbitrary code on affected systems. The vulnerability tracked as CVE-2024-28988 was discovered by the Trend Micro Zero Day Initiative (ZDI) team during their investigation into a previous security flaw. CVE-2024-28988: Java Deserialization Flaw The vulnerability stems from a […]

The post SolarWinds Web Help Desk Vulnerability Allows Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Federal Police arrested a 33-year-old Brazilian hacker in Belo Horizonte, Minas Gerais. The suspect is accused of infiltrating the systems of the Federal Police (PF) and other international institutions to sell sensitive data. This arrest marks a critical step in addressing cybercrime that targets government and private entities worldwide. Details of the Arrest The […]

The post Hacker Arrested for Invading Computers & Selling Police Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has disclosed multiple vulnerabilities affecting its ATA 190 Series Analog Telephone Adapter firmware, posing significant user risks. These vulnerabilities could allow remote attackers to execute unauthorized actions, including remote code execution, configuration changes, etc. Here’s a detailed breakdown of the vulnerabilities and their potential impact. Summary of Vulnerabilities Cisco’s advisory highlights several vulnerabilities in […]

The post Cisco ATA 190 Telephone Adapter Vulnerabilities Let Attackers Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

VMware released an advisory (VMSA-2024-0021) addressing a critical vulnerability in its HCX platform. The vulnerability, CVE-2024-38814, is an authenticated SQL injection flaw that poses a significant security risk. With a CVSSv3 base score of 8.8, this issue is classified as having “Important” severity. The vulnerability allows malicious authenticated users with non-administrator privileges to execute unauthorized […]

The post VMware HCX Platform Vulnerable to SQL Injection Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A federal grand jury has indicted two Sudanese nationals, Ahmed Salah Yousif Omer, 22, and Alaa Salah Yusuuf Omer, 27. The pair are accused of operating Anonymous Sudan, a notorious cybercriminal group responsible for tens of thousands of Distributed Denial of Service (DDoS) attacks targeting critical infrastructure and government agencies globally. Unveiling the Cybercriminal Network […]

The post Authorities Indicted Two Anonymous Sudan Hackers Over Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A company has fallen victim to a cyberattack after unknowingly hiring a North Korean cybercriminal as a remote IT worker. The unidentified firm, based in the UK, US, or Australia, discovered the breach after the hacker downloaded sensitive data and issued a ransom demand. The incident highlights the growing threat of North Korean operatives infiltrating […]

The post Organization Hacked Following Accidental Hiring of North Korean Remote IT Worker appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft’s customers are under constant cyber assault, facing millions of attacks daily from various threat actors as nation-states and cybercrime gangs are increasingly collaborating, escalating the severity and frequency of attacks.  They had observed a concerning trend of state-affiliated actors outsourcing cyber operations to criminal groups, which is evident in various activities, such as financial […]

The post Microsoft Customers Facing 600 Million Cyber Attack Launched Every Day appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

EDRSilencer, a red team tool, interferes with EDR solutions by blocking network communication for associated processes using the WFP, which makes it harder to identify and remove malware, as EDRs cannot send telemetry or alerts. The code demonstrates a technique where malware can evade detection by blocking EDR traffic, making it harder to identify and […]

The post Hackers Abuse EDRSilencer Red Team Tool To Evade Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has announced a significant security update for its Chrome browser, addressing 17 vulnerabilities in the latest build. The update, which affects the Stable and Extended Stable channels, will roll out over the coming days and weeks for Windows, Mac, and Linux users. Update Details The Stable channel has been updated to versions 130.0.6723.58/.59 for […]

The post Chrome Security Update, 17 Vulnerabilities Patched appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) released two critical Industrial Control Systems (ICS) advisories on October 15, 2024. These advisories provide essential information about current security issues, vulnerabilities, and potential exploits affecting ICS. The advisories focus on vulnerabilities in Siemens Siveillance Video Cameras and Schneider Electric Data Center Expert software. Analyse Any Suspicious Links […]

The post CISA Releases ICS Advisories to Mitigate Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Horus Protector crypter is being used to distribute various malware families, including AgentTesla, Remcos, Snake, NjRat, and others, whose primarily spread through archive files containing VBE scripts, which are encoded VBS scripts.  Once executed, these scripts decode and execute the malicious payload, as this new distribution method makes detection and prevention more challenging due […]

The post HORUS Protector Delivering AgentTesla, Remcos, Snake, NjRat Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cerberus Android banking trojan, which gained notoriety in 2019 for its ability to target financial and social media apps, has continued to evolve and spread through various forks and variants.  Recent research has uncovered a new campaign, dubbed ErrorFather, which leverages the Cerberus source code and utilizes a multi-stage dropper mechanism to deploy the […]

The post ErrorFather Hackers Attacking & Control Android Device Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A group of hackers reportedly sells sensitive data stolen from Cisco Systems, Inc. The breach, allegedly carried out by a collective known as IntelBroker in collaboration with EnergyWeaponUser and zjj, has raised significant concerns across the tech industry. Details of the Breach According to a post on social media platform X by user H4ckManac, the […]

The post Hackers Allegedly Selling Data Stolen from Cisco appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.