FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed. “Data …

Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin

Blog WriterThe Hacker News - Original news source is thehackernews.com

Germany’s Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world’s largest illegal dark web marketplace that has cumulatively facilitated over $5 billion …

Battling Cybersecurity Risk: How to Start Somewhere, Right Now

Blog WriterThe Hacker News - Original news source is thehackernews.com

Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there’s rarely been a more dangerous cybersecurity environment. It’s a danger that affects every organization – automated …

Hackers Breach Mailchimp Email Marketing Firm to Launch Crypto Phishing Scams

Blog WriterThe Hacker News - Original news source is thehackernews.com

Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks.  …

Researchers Trace Widespread Espionage Attacks Back to Chinese ‘Cicada’ Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a “widening” of …

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on “evidence …

Researchers Uncover New Android Spyware With C2 Server Linked to Turla Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

An Android spyware application has been spotted masquerading as a “Process Manager” service to stealthily siphon sensitive information stored in the infected devices. Interestingly, the app — that has the …

Experts Shed Light on BlackGuard Infostealer Malware Sold on Russian Hacking Forums

Blog WriterThe Hacker News - Original news source is thehackernews.com

A previously undocumented “sophisticated” information-stealing malware named BlackGuard is being advertised for sale on Russian underground forums for a monthly subscription of $200. “BlackGuard has the capability to steal all …

Brokenwire Hack Could Let Remote Attackers Disrupt Charging for Electric Vehicles

Blog WriterThe Hacker News - Original news source is thehackernews.com

A group of academics from the University of Oxford and Armasuisse S+T has disclosed details of a new attack technique against the popular Combined Charging System (CCS) that could potentially …