Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan

Blog WriterThe Hacker News - Original news source is thehackernews.com

Infection chains associated with the multi-purpose Qakbot malware have been broken down into “distinct building blocks,” an effort that Microsoft said will help to proactively detect and block the threat …

Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors are actively weaponizing unpatched servers affected by the newly identified “Log4Shell” vulnerability in Log4j to install cryptocurrency miners, Cobalt Strike, and recruit the devices into a botnet, even …

BlackCat: A New Rust-based Ransomware Malware Spotted in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details have emerged about what’s the first Rust-language-based ransomware strain spotted in the wild that has already amassed “some victims from different countries” since its launch last month. The ransomware, …

Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Apache Software Foundation has released fixes to contain an actively exploited zero-day vulnerability affecting the widely-used Apache Log4j Java-based logging library that could be weaponized to execute malicious code and allow a …

Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

At least 300,000 IP addresses associated with MikroTik devices have been found vulnerable to multiple remotely exploitable security vulnerabilities that have since been patched by the popular supplier of routers …

1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon …

Over a Dozen Malicious NPM Packages Caught Hijacking Discord Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

At least 17 malware-laced packages have been discovered on the NPM package Registry, adding to a recent barrage of malicious software hosted and delivered through open-source software repositories such as PyPi and …

Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Tuesday said it took steps to disrupt the operations of a sophisticated “multi-component” botnet called Glupteba that approximately infected more than one million Windows computers across the globe …