-
A rudimentary ransomware targets Turkish businesses through phishing emails with “.ru” domain sender addresses. Clicking a PDF attachment’s link triggers downloading a malicious executable from a compromised GitHub account. The executable encrypts crucial files with the “.shadowroot” extension, highlighting a wider trend of ransomware attacks using phishing emails to deploy payloads, demonstrating the ongoing threat […] The post ShadowRoot Ransomware Attacking Organizations With Weaponized PDF Documents appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors often attack cloud services for several illicit purposes. Google Cloud is targeted due to its extensive and powerful resources, which could be abused for a multitude of malicious activities. The vast amounts of data and computing power that Google Cloud services provide often lure threat actors. Due to the complexity of cloud environments, […] The post Hackers Abusing Google Cloud For Phishing appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Chainalysis has launched Operation Spincaster, an initiative to disrupt approval phishing scams that have drained billions from victims’ wallets. This operation, which brings together public and private sectors, has yielded promising results and offers a blueprint for future anti-fraud efforts. The Rise of Approval Phishing Approval phishing has emerged as a highly effective tactic for […] The post Operation Spincaster Disrupts Approval Phishing Technique that Drains Victim’s Wallets appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Since October 2023, MuddyWater, which is an Iranian threat group linked to MOIS, has escalated its phishing campaigns in Middle East countries, specifically Israel. In their approach, they use already compromised email accounts to spread malicious content across various sectors. Predawn churning of curd formed overnight using fresh cow milk. Made freshly in small batches. […] The post Hackers Exploiting Legitimate RMM Tools With BugSleep Malware appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers use Banking Trojans to steal sensitive financial information. These Trojans can also intercept and modify transactions, allowing hackers to drain bank accounts or make unauthorized purchases. BlackBerry cybersecurity researchers recently detected that the Coyote banking trojan has been actively attacking Windows users to steal login details. Coyote is an advanced .NET Trojan horse focusing […] The post Coyote Banking Trojan Attacking Windows Users To Steal Login Details appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Active since 2015, Mekotio is a Latin American banking trojan specifically designed to target financial data in regions like Brazil, Chile, Mexico, Spain, and Peru. It exhibits links to the recently disrupted Grandoreiro malware, both likely originating from the same source. Mekotio utilizes phishing emails as its primary infection vector. These emails incorporate social engineering […] The post Mekotio Banking Trojan Attacking American Users To Steal Financial Data appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
CYBERSECURITY / DEFENSE / INTELLIGENCE
