New MuddyWater Campaign Uses Legitimate Remote Administration Tools to Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Deep Instinct identified a new MuddyWater threat campaign active since at least 2017, and frequently conducts campaigns against high-value targets in American, European, and Asian countries. MuddyWater, also known as MERCURY or Static Kitten, is an APT group recently attributed …

New Dark Web Website Allows Hackers to Embed Malware to Legitimate Android Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ThreatFabric’s researchers found ‘Zombinder’, a third-party darknet service that was used to bind malware payloads to legitimate Android applications.  In order to deceive users into installing a malicious payload, it is used to bind a malicious payload to a legitimate application. …

New Ransom Payment Schemes Target Executives, Telemedicine

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Ransomware groups are constantly devising new methods for infecting victims and convincing them to pay up, but a couple of strategies tested recently seem especially devious. The first centers on targeting healthcare organizations that offer consultations over the Internet and …

How to Effectively Handle Data Security During Pentest?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A lot of data is generated during pentest engagements: vulnerabilities, open ports, vulnerable IPs… Soon enough, it gets tough to keep everything tracked.  What kind of data is this? Let’s take a look at the sources of such information: Doing …

Pwn2Own Day 2 – Researchers Earn $400,000 for 26 Unique 0-days Exploits

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have received $400,000 for 26 distinct 0-day flaws in the Toronto Pwn2Own hacking competition. Followed by Day 1 of the event, Samsung Galaxy was successfully used in two SOHO Smashup demonstrations and was exploited twice. Pwn2Own Day 2 In …

Samsung Galaxy S22 Hacked Multiple Times At Pwn2Own Hacking Contest – Day 1

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Pwn2Own Toronto 2022 hacking contest has started; this year marks the 10th anniversary of the consumer-oriented competition. On the first day of Pwn2Own Toronto 2022, reports of the Samsung Galaxy S22 hack made a splash. The full cash prize and …

Kali Linux 2022.4 Released With New Hacking Tools & Azure Images

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The most recent Kali Linux release for 2022, Kali Linux 2022.4, from Offensive Security includes updated desktop experiences, new Azure and QEMU images, and six new tools. With the addition of 6 new tools, Kali Linux is once again available …

7 Myths and Misunderstandings about Bots Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Bot attacks are on the rise. Across 693 websites, 2.1 million bot attacks were blocked on the AppTrana WAF last month.  Even though bot attacks are more prevalent than ever, there are some unproven myths around them.  By understanding these …

Largest Mobile Malware Darkweb Marketplace Discovered Having Over 1900 Injection Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The “InTheBox” marketplace, which recently emerged on the Dark Web and is intended only for operators of mobile malware, has been uncovered by the Resecurity Hunter team. Since then, the key actor has been privately providing webinjects development services for …

Critical Ping Vulnerability Let Hackers Take Over FreeBSD Systems Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the FreeBSD operating system’s ping module allows Attackers to execute an arbitrary code and take over the system remotely. Developers of the operating system recently released security updates. CVE-2022-23093 has been assigned to the flaw.  It …