DDoS IRC Bot Malware Spreading Through Korean WebHard Platforms

Blog WriterThe Hacker News - Original news source is thehackernews.com

An IRC (Internet Relay Chat) bot strain programmed in GoLang is being used to launch distributed denial-of-service (DDoS) attacks targeting users in Korea. “The malware is being distributed under the guise of adult games,” researchers from AhnLab’s Security Emergency-response Center (ASEC) said in …

Ukraine: Recent Cyber Attacks Part of Wider Plot to Sabotage Critical Infrastructure

Blog WriterThe Hacker News - Original news source is thehackernews.com

The coordinated cyberattacks targeting Ukrainian government websites and the deployment of a data-wiper malware called WhisperGate on select government systems are part of a broader wave of malicious activities aimed at sabotaging critical infrastructure in the country. The Secret Service of Ukraine on Monday confirmed that …

Researchers Bypass SMS-based Multi-Factor Authentication Protecting Box Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed details of a now-patched bug in Box’s multi-factor authentication (MFA) mechanism that could be abused to completely sidestep SMS-based login verification. “Using this technique, an attacker could use stolen credentials to compromise an organization’s Box account …

Europol Shuts Down VPNLab, Cybercriminals’ Favourite VPN Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

VPNLab.net, a VPN provider that was used by malicious actors to deploy ransomware and facilitate other cybercrimes, was taken offline following a coordinated law enforcement operation. Europol said it took action against the misuse of the VPN service by grounding 15 of …

Earth Lusca Hackers Aimed at High-Value Targets in Government and Private Sectors

Blog WriterThe Hacker News - Original news source is thehackernews.com

An elusive threat actor called Earth Lusca has been observed striking organizations across the world as part of what appears to be simultaneously an espionage campaign and an attempt to reap monetary profits. “The list of its victims includes high-value …

Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central

Blog WriterThe Hacker News - Original news source is thehackernews.com

Enterprise software maker Zoho on Monday issued patches for a critical security vulnerability in Desktop Central and Desktop Central MSP that a remote adversary could exploit to perform unauthorized actions in affected servers. Tracked as CVE-2021-44757, the shortcoming concerns an instance …

Chrome Limits Websites’ Direct Access to Private Networks for Security Reasons

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google Chrome has announced plans to prohibit public websites from directly accessing endpoints located within private networks as part of an upcoming major security shakeup to prevent intrusions via the browser. The proposed change is set to be rolled out …

Dark Web’s Largest Marketplace for Stolen Credit Cards is Shutting Down

Blog WriterThe Hacker News - Original news source is thehackernews.com

UniCC, the biggest dark web marketplace for stolen credit and debit cards, has announced that it’s shuttering its operations after earning $358 million in purchases since 2013 using cryptocurrencies such as Bitcoin, Litecoin, Ether, and Dash. “Don’t build any conspiracy …

High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicious actor to take over vulnerable sites. “This flaw made it possible for an attacker to update arbitrary …