alt=a woman holding two balls over her eyes

2024-02-10 Post a Comment

Facebook ads push new Ov3r_Stealer password-stealing malware

By Bill Toulas A new password-stealing malware named Ov3r_Stealer is spreading through fake job advertisements on Facebook, aiming to steal account credentials and cryptocurrency. The fake job ads are for management positions and lead users to a Discord URL where a PowerShell script downloads the malware payload from a GitHub repository. Analysts atÂ TrustwaveÂ who discovered the malware campaign note that although none of its tactics are novel, it remains a severe […]

alt=a man in a black robe holding a tablet in a server room

Cyber security

2024-02-10 Post a Comment

Chinese hackers hid in US infrastructure network for 5 years

By Sergiu Gatlan The Chinese Volt Typhoon cyber-espionage group infiltrated a critical infrastructure network in the United States and remained undetected for at least five years before being discovered, according to a joint advisory from CISA, the NSA, the FBI, and partner Five Eyes agencies. Volt Typhoon hackers are known for extensively using living off the land (LOTL) techniques as part of their attacks on critical infrastructure organizations. They’re also […]

Cyber security

2024-02-10 Post a Comment

Government hackers targeted iPhone owners with zero-days, Google says

Lorenzo Franceschi-Bicchierai@lorenzofb Government hackers last year exploited three unknown vulnerabilities in Appleâ€™s iPhone operating system to target victims with spyware developed by a European startup, according to Google. On Tuesday, Googleâ€™s Threat Analysis Group, the companyâ€™s team that investigates nation-backed hacking,Â published a reportÂ analyzing several government campaigns conducted with hacking tools developed by several spyware and exploit sellers, including Barcelona-based startup Variston. In one of the campaigns, according to Google, government […]

Cyber security

2024-02-10 Post a Comment

Hackers steal data of 2 million in SQL injection, XSS attacks

By Bill Toulas A threat group named ‘ResumeLooters’ has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site scripting (XSS) attacks. The attackers mainly focus on the APAC region, targeting sites in Australia, Taiwan, China, Thailand, India, and Vietnam to steal job seeker’s names, email addresses, phone numbers, employment history, education, and other relevant information. […]

alt=a computer screen with numbers on it

Cyber security

2024-02-10 Post a Comment

How security experts unravel ransomware

Katie Malone Senior Reporter Itâ€™s usually law enforcement, or a mistake by the ransomware gang, that lets them reverse the process. Hackers use ransomware to go after every industry,Â charging as much money as they canÂ to return access to a victim’s files. Itâ€™s a lucrative business to be in. In the first six months of 2023, ransomware gangsÂ bilked $449 million from their targets, even though most governmentsÂ advise against paying ransoms. Increasingly, […]