LinkedIn Adds Verified Emails, Profile Creation Dates

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Responding to a recent surge in AI-generated bot accounts, LinkedIn is rolling out new features that it hopes will help users make more informed decisions about with whom they choose to connect. Many LinkedIn profiles now display a creation date, …

Android Apps With Millions of Installation Redirect Users to Weaponized Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It seems that the Google app store has still not been able to catch malicious applications, as they are still being listed there. In the Google Play store, there are currently four malicious apps that are available. The 4 malicious …

Hacker Charged With Extorting Online Psychotherapy Service

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 25-year-old Finnish man has been charged with extorting a once popular and now-bankrupt online psychotherapy company and its patients. Finnish authorities rarely name suspects in an investigation, but they were willing to make an exception for Julius “Zeekill” Kivimaki, …

Dropbox Hacked – Attackers Stolen 130 GitHub Repositories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent disclosure, Dropbox revealed that a security breach had occurred. On GitHub, 130 of the company’s source code repositories have been accessed unauthorizedly by the threat actors. Threat actors gained access to the GitHub repositories of Dropbox by …

OpenSSL Fixed Two High Severity Vulnerabilities That Can be Exploited Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There have been two high-severity security vulnerabilities recently discovered and patched by the OpenSSL Project in its open-source cryptographic library. Encryption of communication channels and HTTPS connections is achieved through the use of this cryptographic library. In OpenSSL version 3.0.7 …

Follina Exploit Let Hackers Compromise the Domain Controller Via RDP Session

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An intrusion was detected by The DFir Report in early June 2022 that leveraged the NetSupport Atera Agent Cobalt Strike Threat actors have exploited the CVE-2022-30190 (Follina vulnerability) in this intrusion and here they used a malicious Word document to …

Chinese APT Hackers Deploy LODEINFO Malware in Windows to Open Backdoor

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers at Kaspersky’s threat research lab have recently tracked down a revised version of LODEINFO malware that has been used by APT10 (aka Stone Panda, Bronze Riverside, Cicada, and Potassium) to abuse security software and use the malware against …

Hackers Selling Ransomware Victims and Network Access Data for $4 Million

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Israeli cyber-intelligence firm KELA has recently published its Q3 2022 ransomware report in which it has reported that an estimated $4 million worth of 576 global corporate network access is being sold worldwide by hackers, enhancing the cyberattacks on large …

GitHub Repojacking Bug Let Hackers Take Control Over a GitHub Repository

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity security flaw has been patched recently by GitHub on September 19, 2022, and it’s a cloud-based repository hosting service. By exploiting this vulnerability, malicious repositories could have been created and attacks on the supply chain could have been …

Accused ‘Raccoon’ Malware Developer Fled Ukraine After Russian Invasion

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 31, 2022 0 Comments A 26-year-old Ukrainian man is awaiting extradition from The Netherlands to the United States on charges that he acted as a core developer for Raccoon, a popular “malware-as-a-service” offering that helped paying customers steal passwords …