‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “The Manipulaters,” a sprawling web hosting network of phishing and spam delivery platforms. In January 2024, The Manipulaters pleaded with this author to unpublish previous stories about their work, …

WP-Members Plugin Expose WordPress Sites To Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher reported a critical vulnerability in the WP-Members Membership Plugin that allows attackers to inject malicious scripts and potentially take over websites.  Administrators could take advantage of the unauthenticated stored XSS flaw that was present in the X-Forwarded …

StrelaStealer Attacking Users to Steal Logins from Outlook & Thunderbird

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated variant of StrelaStealer malware has been identified, targeting Spanish-speaking users with the primary aim of pilfering email account credentials from popular email clients Outlook and Thunderbird. This updated strain of StrelaStealer, first spotted in the wild in early …

New Chrome Feature Blocks Hackers From Stealing Your Cookie

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has unveiled a new web feature called “Device Bound Session Credentials (DBSC)” that will help protect users from cookie theft. Malware that steals cookies from users and allows attackers access to their accounts affects a large number of users …

What is Malware Packers? How To Analyse With ANY.RUN Sandbox – SOC/DIFR Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Antiviruses can quickly detect malicious executable files, but attackers can bypass this by using packers to compress and obfuscate the code, making it difficult for antivirus software to analyze. Packers are similar to compression tools like ZIP and RAR, but …

Chinese Hackers Hijack Swedish Routers to Launch Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Security Police (Säpo) has disclosed that a Chinese hacker group, APT31, has commandeered Swedish routers to perpetrate cyber attacks against multiple countries. This sophisticated cyber espionage campaign, believed to be orchestrated by elements within the Chinese state apparatus, underscores …

New Pikabot Campaign Weaponizes HTML, Javascript & Excel Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new player has emerged with a sophisticated approach to infiltrating systems worldwide. Dubbed Pikabot, this malicious backdoor has been active since early 2023, but recent activities have showcased its adaptability and the increasing sophistication of its distribution methods. McAfee …

JumpServer Critical Flaws Let Attackers Execute Arbitrary Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The critical vulnerabilities in JumpServer’s Ansible that allowed attackers to execute arbitrary remote code have been patched. With a CVSS base score of 10, the critical vulnerabilities identified as CVE-2024-29201 and CVE-2024-29202 impact versions v3.0.0-v3.10.6. A jump server is an intermediary …

Authentic8 and CISA Launch Silo Shield to Safeguard High-Risk Communities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Authentic8, provider of the leading OSINT research platform Silo for Research, today launched its Silo Shield Program to enhance online security for high-risk communities. Also today, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) launched a webpage listing free tools …

Qualcomm Security Flaws Let Attackers Takeover The Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers exploit Qualcomm’s security flaws to gain unauthorized access, execute malicious code, or potentially compromise data integrity and the system.  Vulnerabilities present on Qualcomm’s popular chipsets and modems are desirable to hackers intending to breach devices ranging from smartphones to …