Hackers Using New Evasive Technique to Deliver AsyncRAT Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new, sophisticated phishing attack has been observed delivering the AsyncRAT trojan as part of a malware campaign that’s believed to have commenced in September 2021. “Through a simple email phishing tactic with an HTML attachment, threat attackers are delivering …

Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple on Wednesday released iOS 15.3 and macOS Monterey 12.2 with a fix for the privacy-defeating bug in Safari, as well as to contain a zero-day flaw, which it said has been exploited in the wild to break into its devices. Tracked …

Initial Access Broker Involved in Log4Shell Attacks Against VMware Horizon Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

An initial access broker group tracked as Prophet Spider has been linked to a set of malicious activities that exploits the Log4Shell vulnerability in unpatched VMware Horizon Servers. According to new research published by BlackBerry Research & Intelligence and Incident …

Webinar: How to See More, But Respond Less with Enhanced Threat Visibility

Blog WriterThe Hacker News - Original news source is thehackernews.com

The subject of threat visibility is a recurring one in cybersecurity. With an expanding attack surface due to the remote work transformation, cloud and SaaS computing and the proliferation of personal devices, seeing all the threats that are continuously bombarding …

Google Drops FLoC and Introduces Topics API to Replace Tracking Cookies for Ads

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Tuesday announced that it is abandoning its controversial plans for replacing third-party cookies in favor of a new Privacy Sandbox proposal called Topics, which categorizes users’ browsing habits into approximately 350 topics. The new mechanism, which takes the place …

12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

Blog WriterThe Hacker News - Original news source is thehackernews.com

A 12-year-old security vulnerability has been disclosed in a system utility called Polkit that grants attackers root privileges on Linux systems, even as a proof-of-concept (PoC) exploit has emerged in the wild merely hours after technical details of the bug …

Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday took the wraps off a multi-stage espionage campaign targeting high-ranking government officials overseeing national security policy and individuals in the defense industry in Western Asia. The attack is unique as it leverages Microsoft OneDrive as a …

Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A previously undocumented cyber-espionage malware aimed at Apple’s macOS operating system leveraged a Safari web browser exploit as part of a watering hole attack targeting politically active, pro-democracy individuals in Hong Kong. Slovak cybersecurity firm ESET attributed the intrusion to an actor …

TrickBot Malware Using New Techniques to Evade Web Injection Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The cybercrime operators behind the notorious TrickBot malware have once again upped the ante by fine-tuning its techniques by adding multiple layers of defense to slip past antimalware products. “As part of that escalation, malware injections have been fitted with …

Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Android malware tracked as BRATA has been updated with new features that grants it the ability to record keystrokes, track device locations, and even perform a factory reset in an apparent bid to cover up fraudulent wire transfers. The …