Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022. …

Hamas-linked Hackers Targeting High-Ranking Israelis Using ‘Catfish’ Lures

Blog WriterThe Hacker News - Original news source is thehackernews.com

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an “elaborate campaign” targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and …

First Malware Targeting AWS Lambda Serverless Platform Discovered

Blog WriterThe Hacker News - Original news source is thehackernews.com

A first-of-its-kind malware targeting Amazon Web Services’ (AWS) Lambda serverless computing platform has been discovered in the wild. Dubbed “Denonia” after the name of the domain it communicates with, “the …

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia’s military intelligence service, with the …

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. “SharkBot steals credentials and banking information,” …

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks. Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 …

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed. “Data …

Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin

Blog WriterThe Hacker News - Original news source is thehackernews.com

Germany’s Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world’s largest illegal dark web marketplace that has cumulatively facilitated over $5 billion …