The database includes indicators of compromise (IOCs) and relationships between different artifacts observed within an analysis session. In October 2022, ANY.RUN launched TI Threat Intelligence Feeds to allow users to utilize this data. Security experts assess threats using ANY.RUN, an…
Category: GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
CryptoWire Ransomware Attacking Abuses Schedule Task To maintain Persistence
AhnLab security researchers detected a resurgence of CryptoWire, a ransomware strain originally prevalent in 2018, built with the AutoIt scripting language, which primarily spreads through phishing emails. Unlike most ransomware, CryptoWire reportedly includes the decryption key within its code, while…
E-Root Admin Sentenced to 42 Months in Prison for Selling 350,000 Credentials
Tampa, FL – In a significant crackdown on cybercrime, Sandu Boris Diaconu, a 31-year-old Moldovan national, has been sentenced to 42 months in federal prison after pleading guilty to charges related to operating a network of illicit websites. U.S. Senior…
WhiteSnake Stealer Checks for Mutex & VM Function Before Execution
A new variant of the WhiteSnake Stealer, a formidable malware that has been updated to be more elusive and efficient in its malicious endeavors. One of the key features of the updated WhiteSnake Stealer is its use of mutexes (mutual…
Researchers Hack AI Assistants Using ASCII Art
Large language models (LLMs) are vulnerable to attacks, leveraging their inability to recognize prompts conveyed through ASCII art. ASCII art is a form of visual art created using characters from the ASCII (American Standard Code for Information Interchange) character set.…
Microsoft Deprecate 1024-bit RSA Encryption Keys in Windows
Microsoft has announced an important update for Windows users worldwide in a continuous effort to bolster security and performance. As part of its latest security enhancements, Microsoft is phasing out the support for 1024-bit RSA encryption keys within the Windows…
Beware Of Free wedding Invite WhatsApp Scam That Steal Sensitive Data
The ongoing “free wedding invite” scam is one of several innovative campaigns aimed at the senior population. Through social media chats like WhatsApp, fraudsters use deceptive tactics, most often involving fake wedding invitations. It communicates with its victims over WhatsApp…
Hackers Using Weaponized SVG Files in Cyber Attacks
Cybercriminals have repurposed Scalable Vector Graphics (SVG) files to deliver malware, a technique that has evolved significantly with the advent of the AutoSmuggle tool. Introduced in May 2022, AutoSmuggle facilitates embedding malicious files within HTML or SVG content, making it…
New Acoustic Keyboard Side Channel Attack Let Attackers Steal Sensitive Data
In recent years, personal data security has surged in importance due to digital device usage. Side-channel attacks exploit system side effects to gather information. Electronic emissions are a known vulnerability to such attacks. Acoustic side-channel attacks are particularly threatening. In…
Discontinued WordPress Plugin Flaw Exposes Websites to Cyber Attacks
A critical vulnerability was discovered in two plugins developed by miniOrange. The affected plugins, miniOrange’s Malware Scanner and Web Application Firewall, contained a severe privilege escalation flaw that could allow unauthenticated attackers to gain administrative access to WordPress sites. This…
ShadowSyndicate Hackers Exploiting Aiohttp Vulnerability To Access Sensitive Data
A new Aiohttp vulnerability has been discovered, which the threat actor ShadowSyndicate exploits. Aiohttp is an asynchronous HTTP client/server framework that has extensive capabilities and flexibility to make aiohttp perform various asynchronous tasks. The ShadowSyndicate threat actor operates as a…
Hackers Launching AI-Powered Cyber Attacks to Steal Billions
INTERPOL’s latest assessment on global financial fraud uncovers the sophisticated evolution of cybercrime, fueled by advancements in technology such as Artificial Intelligence (AI), cryptocurrencies, and the proliferation of phishing- and ransomware-as-a-service models. These developments have made fraud schemes more intricate…
Fujitsu Hacked – Attackers Infected The Company Computers with Malware
Fujitsu Limited announced the discovery of malware on several of its operational computers, raising concerns over the potential leak of files containing personal and customer information. The company has taken immediate action to isolate the affected computers and enhance the…
GBHackers Weekly Round-Up: Cyber Attacks, Vulnerabilities, Threats & New Cyber Stories
With our weekly GBHackers news summary, explore and learn about the most recent developments in the cybersecurity field. This practice will allow you to remain up-to-date on the newest developments, weaknesses, groundbreaking progress, hacking incidents, potential dangers, and fresh narratives…
Hackers Stolen 70 Million AT&T Sensitive Customers Data
Cybersecurity researchers at vx-underground have reported that over 70 million records from an unspecified division of telecommunications giant AT&T have been leaked online. The breach, one of the largest in recent times, has raised serious concerns about data security and…
DarkGPT – A ChatGPT-4 Powered OSINT Tool To Detect Leaked Databases
DarkGPT, your next-level OSINT (Open Source Intelligence) assistant. In this digital era, the ability to sift through vast amounts of data is invaluable, and DarkGPT, leveraging the power of GPT-4-200K, is designed to query leaked databases with precision. A Spanish…
Dark Web Market Admin Gets 42 Months Prison for Selling Login Passwords
Sandu Boris Diaconu, a 31-year-old Moldovan national, has been sentenced to 42 months in federal prison for his role in operating a notorious dark web marketplace known as E-Root. The sentencing was carried out by U.S. Senior District Judge James…
StopCrypt Ransomware Utilizing Multi-Stage Shellcodes To Attack Windows
A new variant of StopCrypt ransomware has been discovered. It executes multi-stage shellcodes before launching a final payload containing the file encryption code. This malware uses several techniques, such as detection evasion, a time-delaying loop of 600 million iterations, and…
Hackers Trick Users to Install Malware Via Weaponized PDF
In a sophisticated cyberattack campaign, malicious actors impersonating Colombian government agencies target individuals across Latin America. The attackers are distributing emails containing PDF attachments, falsely accusing recipients of traffic violations or other legal infractions. These deceptive communications are designed to…
Kubernetes Vulnerability Let Attackers Take Full System Control
A new vulnerability, CVE-2023-5528, has been discovered with Kubernetes. This vulnerability is associated with a command injection vulnerability that leads to remote code execution with SYSTEM-level privileges on the compromised Windows node. The severity for this vulnerability has been given…