DDoS IRC Bot Malware Spreading Through Korean WebHard Platforms

Blog WriterThe Hacker News - Original news source is thehackernews.com

An IRC (Internet Relay Chat) bot strain programmed in GoLang is being used to launch distributed denial-of-service (DDoS) attacks targeting users in Korea. “The malware is being distributed under the guise of adult games,” researchers from AhnLab’s Security Emergency-response Center (ASEC) said in …

FIN8 Hackers Spotted Using New ‘White Rabbit’ Ransomware in Recent Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The financially motivated FIN8 actor, in all likelihood, has resurfaced with a never-before-seen ransomware strain called “White Rabbit” that was recently deployed against a local bank in the U.S. in December 2021. That’s according to new findings published by Trend Micro, …

Ukraine: Recent Cyber Attacks Part of Wider Plot to Sabotage Critical Infrastructure

Blog WriterThe Hacker News - Original news source is thehackernews.com

The coordinated cyberattacks targeting Ukrainian government websites and the deployment of a data-wiper malware called WhisperGate on select government systems are part of a broader wave of malicious activities aimed at sabotaging critical infrastructure in the country. The Secret Service of Ukraine on Monday confirmed that …

Europol Shuts Down VPNLab, Cybercriminals’ Favourite VPN Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

VPNLab.net, a VPN provider that was used by malicious actors to deploy ransomware and facilitate other cybercrimes, was taken offline following a coordinated law enforcement operation. Europol said it took action against the misuse of the VPN service by grounding 15 of …

Researchers Bypass SMS-based Multi-Factor Authentication Protecting Box Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed details of a now-patched bug in Box’s multi-factor authentication (MFA) mechanism that could be abused to completely sidestep SMS-based login verification. “Using this technique, an attacker could use stolen credentials to compromise an organization’s Box account …

Earth Lusca Hackers Aimed at High-Value Targets in Government and Private Sectors

Blog WriterThe Hacker News - Original news source is thehackernews.com

An elusive threat actor called Earth Lusca has been observed striking organizations across the world as part of what appears to be simultaneously an espionage campaign and an attempt to reap monetary profits. “The list of its victims includes high-value …

Dark Web’s Largest Marketplace for Stolen Credit Cards is Shutting Down

Blog WriterThe Hacker News - Original news source is thehackernews.com

UniCC, the biggest dark web marketplace for stolen credit and debit cards, has announced that it’s shuttering its operations after earning $358 million in purchases since 2013 using cryptocurrencies such as Bitcoin, Litecoin, Ether, and Dash. “Don’t build any conspiracy …

Chrome Limits Websites’ Direct Access to Private Networks for Security Reasons

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google Chrome has announced plans to prohibit public websites from directly accessing endpoints located within private networks as part of an upcoming major security shakeup to prevent intrusions via the browser. The proposed change is set to be rolled out …

Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central

Blog WriterThe Hacker News - Original news source is thehackernews.com

Enterprise software maker Zoho on Monday issued patches for a critical security vulnerability in Desktop Central and Desktop Central MSP that a remote adversary could exploit to perform unauthorized actions in affected servers. Tracked as CVE-2021-44757, the shortcoming concerns an instance …