New Backdoor Targets French Entities via Open-Source Package Installer

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have exposed a new targeted email campaign aimed at French entities in the construction, real estate, and government sectors that leverages the Chocolatey Windows package manager to deliver a …

Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware

Blog WriterThe Hacker News - Original news source is thehackernews.com

An analysis of two ransomware attacks has identified overlaps in the tactics, techniques, and procedures (TTPs) between BlackCat and BlackMatter, indicating a strong connection between the two groups. While it’s typical of …

Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

Blog WriterThe Hacker News - Original news source is thehackernews.com

A financially motivated threat actor has been observed deploying a previously unknown rootkit targeting Oracle Solaris systems with the goal of compromising Automatic Teller Machine (ATM) switching networks and carrying …

DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly

Blog WriterThe Hacker News - Original news source is thehackernews.com

The malware known as DirtyMoe has gained new worm-like propagation capabilities that allow it to expand its reach without requiring any user interaction, the latest research has found. “The worming …

Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion

Blog WriterThe Hacker News - Original news source is thehackernews.com

In what’s an act of deliberate sabotage, the developer behind the popular “node-ipc” NPM package shipped a new tampered version to condemn Russia’s invasion of Ukraine, raising concerns about security …

New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly disclosed security vulnerability in the Kubernetes container engine CRI-O called cr8escape could be exploited by an attacker to break out of containers and obtain root access to the host. “Invocation …

Ukraine Secret Service Arrests Hacker Helping Russian Invaders

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Security Service of Ukraine (SBU) said it has detained a “hacker” who offered technical assistance to the invading Russian troops by providing mobile communication services inside the Ukrainian territory. …