ChatGPT-Powered Malware Attacking Cloud Platforms to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors can potentially exploit ChatGPT to generate convincing phishing emails or deceptive content encouraging users to download malware.  They may also use the model to obfuscate malicious code or to assist in social engineering attacks, making it more challenging …

Top 6 Cyber Incident Response Plans – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It is getting better and better that modern security tools can protect companies’ networks and endpoints from hackers. But sometimes, bad people still find a way in. Security teams need to be able to stop risks and get things back …

Google Calendar RAT Abusing Calendar Events to Create Red Teaming Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Calendar RAT (GCR) is a proof of concept for Command & Control (C2) via Google Calendar Events. It’s useful when setting up a full red team infrastructure is challenging. GCR needs a Gmail account, using event descriptions in Google …

What is Crowdsourced Threat Intelligence?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat intelligence is essential for cybersecurity, as it provides organizations with a clear view of the current threat landscape and enables them to adapt their defenses accordingly. While there are many ways to gather threat intelligence, crowdsourcing stands as one …

NODLINK – First-ever Online System for APT Attack Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers point out that APTs (Advanced Persistent Threats) cause financial harm to organizations. For APT modeling, provenance graphs may be used to cut down on these losses and make detection better. This shows how important real-time systems are. Current online systems …

4 Zero-Day Bug in Microsoft Exchange Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Four new zero-day vulnerabilities have been identified in Microsoft Exchange, which was associated with server-side request forgery and Remote Code Execution. These vulnerabilities haven’t been assigned CVEs and have severities ranging between 7.1 (High) and 7.5 (High). Microsoft developed Microsoft …

RedLine Malware Steals Sensitive Data and Installs More Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Infostealers and the hackers who use them evolve to stay ahead of security measures. They adapt quickly to exploit new vulnerabilities and techniques, making it challenging for defenders to keep up.  Today(7 Nov 2023), researchers from Any Run saw again …

New Millenium RAT Sold on GitHub Attacking Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Millenium-RAT, a sophisticated Remote Access Tool (RAT) for Windows systems, is now available for purchase on GitHub, which exclusively attacking windows systems. The Millenium-RAT, particularly version 2.4; is a Win32 executable built on the.NET framework. It is intended to covertly …

Hackers Bypassing “Restricted Settings” in Android 13 to Drop Malware Securely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The ever-changing landscape of mobile security is a constant battle between security researchers and malicious actors.  As security measures are implemented, cybercriminals find new ways to bypass them.  One such instance is the introduction of Android 13’s “Restricted Settings” feature, …

4,076,530 Systems Hacked Using Gaming-related Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As the gaming industry grows in income and player base, cybercriminals find it an attractive target. Anticipated and already well-known games are frequently utilized as a lure in malicious campaigns.  As of 2022, around 25% of the players were underage, …