Finding Attack Paths in Cloud Environments

Blog WriterThe Hacker News - Original news source is thehackernews.com

The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations’ most sensitive business applications, workloads, and data are in the cloud. Hackers, good and bad, have noticed that trend and effectively evolved their …

Google Sues Scammer for Running ‘Puppy Fraud Scheme’ Website

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Monday disclosed that it’s taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies. “The actor used a network of fraudulent websites that claimed to sell …

Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. “The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, …

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks. “Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim’s machines …

Microsoft’s New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. “This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional …

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022. “The exploitation allows threat actors to download the Mirai sample …

Chinese Hacker Groups Continue to Target Indian Power Grid Assets

Blog WriterThe Hacker News - Original news source is thehackernews.com

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light. Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future’s …

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year. “At least some members of the new BlackCat group have links to the BlackMatter group, …

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

Blog WriterThe Hacker News - Original news source is thehackernews.com

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a “high-level hacker” in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from …

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia’s military intelligence service, with the goal of neutralizing its attacks on Ukraine. “We have since …