Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly …

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A China-based advanced persistent threat (APT) group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns. The activity …

New ‘Quantum’ Builder Lets Attackers Easily Create Malicious Windows Shortcuts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A new malware tool that enables cybercriminal actors to build malicious Windows shortcut (.LNK) files has been spotted for sale on cybercrime forums. Dubbed Quantum Lnk Builder, the …

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Wednesday said it’s in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code …

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Computer Emergency Response Team of Ukraine (CERT-UA) has cautioned of a new set of spear-phishing attacks exploiting the “Follina” flaw in the Windows operating system to deploy password-stealing malware. …

Europol Busts Phishing Gang Responsible for Millions in Losses

Blog WriterThe Hacker News - Original news source is thehackernews.com

Europol on Tuesday announced the dismantling of an organized crime group that dabbled in phishing, fraud, scams, and money laundering activities. The cross-border operation, which involved law enforcement authorities from …