New PDF Tool to Detect Malicious PDF Using PDF Object Hashing Technique

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new open-source tool called PDF Object Hashing is designed to detect malicious PDFs by analyzing their structural “fingerprints.” Released by Proofpoint, the tool empowers security teams to create robust …

SharkStealer Using EtherHiding Pattern to Resolves Communications With C2 Channels

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated information-stealing malware written in Golang has emerged, leveraging blockchain technology to establish covert command-and-control channels. SharkStealer represents a significant evolution in malware design, utilizing the BNB Smart Chain …

Hackers Abuse Microsoft 365 Exchange Direct Send to Bypass Content Filters and Harvest Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft 365 Exchange Online’s Direct Send feature, originally designed to enable legacy devices and applications to send emails without authentication, has become an exploitable pathway for cybercriminals conducting sophisticated phishing …

Bitter APT Hackers Exploit WinRAR Zero-Day Via Weaponized Word Documents to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Bitter APT group, also tracked as APT-Q-37 and known in China as 蔓灵花, has launched a sophisticated cyberespionage campaign targeting government agencies, military installations, and critical infrastructure across China …

AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SquareX released critical research exposing a new class of attack targeting AI browsers. The AI Sidebar Spoofing attack leverages malicious browser extensions to impersonate trusted AI sidebar interfaces, which is …

Hackers Can Access Microsoft Teams Chat and Emails by Retrieving Access Tokens

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new technique allows hackers to extract encrypted authentication tokens from Microsoft Teams on Windows, enabling unauthorized access to chats, emails, and SharePoint files. In a blog post dated October …

Vidar Stealer Bypassing Browser Security Via Direct Memory Injection to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated information-stealing malware known as Vidar Stealer has undergone a complete architectural transformation with the release of version 2.0, introducing advanced capabilities that enable it to bypass Chrome’s latest …

Threat Actors With Stealer Malwares Processing Millions of Credentials a Day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The stealer malware ecosystem has evolved into a sophisticated criminal enterprise capable of processing hundreds of millions of credentials daily. Over the past several years, threat actors have transformed the …

New Rust-Based ChaosBot Malware Leverages Discord for Stealthy Command and Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new threat has emerged in the cybersecurity landscape, leveraging the popular communication platform Discord to conduct covert operations. ChaosBot, a Rust-based malware strain, represents an evolution in adversarial …

Salt Typhoon Using Zero-Day Exploits and DLL Sideloading Techniques to Attack Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Salt Typhoon, a China-linked advanced persistent threat (APT) group active since 2019, has emerged as one of the most sophisticated cyber espionage operations targeting global critical infrastructure. Also tracked as …