Scattered Lapsus$ Hunters Hacker Group Announces Shutdown
Scattered Lapsus$ Hunters, linked to the Jaguar Land Rover cyberattack, claims to shut down as experts suggest the… Continue reading Scattered Lapsus$ Hunters Hacker Group Announces Shutdown
Author Archives: Waqas
Chinese APT Hits Philippine Military Firm with New EggStreme Fileless Malware
Bitdefender uncovers EggStreme, a fileless malware by a China-based APT targeting the Philippine military and APAC organisations. Cybersecurity… Continue reading Chinese APT Hits Philippine Military Firm with New EggStreme Fileless Malware
New Fileless Malware Attack Uses AsyncRAT for Credential Theft
LevelBlue Labs reports AsyncRAT delivered through a fileless attack chain using ScreenConnect, enabling credential theft and persistence. Continue reading New Fileless Malware Attack Uses AsyncRAT for Credential Theft
New Buterat Backdoor Malware Found in Enterprise and Government Networks
Meet Buterat, a new backdoor malware spreading through phishing and trojanized downloads, giving attackers persistent access to enterprise and government networks. Continue reading New Buterat Backdoor Malware Found in Enterprise and Government Networks
New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs
Akamai finds new Docker malware blocking rivals on exposed APIs, replacing cryptominers with tools that hint at early botnet development. Continue reading New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs
npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack
Aikido Security flagged the largest npm attack ever recorded, with 18 packages like chalk, debug, and ansi-styles hacked… Continue reading npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack
Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
Salesloft Drift breach traced to GitHub compromise and stolen OAuth tokens, Mandiant confirms breach contained and Salesforce data targeted. Continue reading Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
GhostAction Attack Steals 3,325 Secrets from GitHub Projects
GhostAction supply chain attack hit 817 GitHub repositories, stealing 3,325 secrets including npm, PyPI, and DockerHub tokens. Continue reading GhostAction Attack Steals 3,325 Secrets from GitHub Projects
Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool
Chess.com confirms a limited data breach affecting 4,500 users after a third-party file transfer tool was compromised. No… Continue reading Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool
Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook
APT28 hackers deploy NotDoor backdoor via Microsoft Outlook macros, using OneDrive sideloading to steal data and evade detection. Continue reading Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook