alt=Malicious software targeting Windows system through GitHub.

2024-03-26 Post a Comment

Hackers Deploy STRRAT & VCURMS Malware on Windows Via GitHub

By Balaji A new phishing campaign targets users with emails containing a button to â€œverify payment information.â€ Clicking the button triggers the download of a malicious JAR file (disguised as an invoice) that leverages a PowerShell command to download two additional JARs. The JARs deploy the STRRAT and VCURMS RATs, granting attackers remote access and keylogging capabilities and credential theft from browsers, applications, Discord, Steam, etc. In contrast, VCURMS can […]

alt=A Raspberry Pi transformed into an online anonymity tool, enhancing privacy and security.

Cyber security

2024-03-26 2 comments

Hackers Transform The Raspberry Pi Into An Online Anonymity Tool

ByBalaji: A new tool, GEOBOX, was advertised on the Dark Web that utilizes Raspberry Pi devices for fraud and anonymization, allowing users to spoof GPS locations, emulate network settings, mimic Wi-Fi access points, and bypass anti-fraud filters. Criminals were using multiple GEOBOX devices as proxies to enhance anonymity during an online banking theft investigation. Attackers are believed to utilize more custom-made or modified devices in the future, creating challenges for […]

alt=A diagram illustrating the process of hacking DHCP to gain elevated privileges on Windows.

Cyber security

2024-03-26 1 comment

DHCP Hacked To Escalate Privileges In Windows Domains

ByBalaji: Security researchers have uncovered a sophisticated method of exploiting the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Windows domains. This technique, dubbed â€œDHCP Coerce,â€ leverages legitimate privileges to compromise entire networks potentially. The vulnerability centers around the DHCP (Dynamic Host Configuration Protocol) service, which is essential for network administration. It automates the assignment of IP addresses, simplifying the management of network connections. However, this convenience […]

Cyber security

2024-03-26 Post a Comment

Hackers poison source code from largest Discord bot platform

By Bill Toulas: The Top.gg Discord bot community with over 170,000 members has been impacted by a supply-chain attack aiming to infect developers with malware that steals sensitive information. The threat actor has been using several tactics, techniques, and procedures (TTPs) over the yearsÂ including hijacking GitHub accounts, distributing malicious Python packages, using aÂ fake Python infrastructure, and social engineering. One of the more recent victims of the attacker is Top.gg,Â a popular […]

alt= Individual wearing hoodie, seated at laptop - potential hacker.

Cyber security

2024-03-26 Post a Comment

GEPF concerned about pension fund data leak in ransomware attack

By Ernest Mabuza: Notorious cybercrime gang LockBit was behind the attempt-GEPF concerned The Government Employees Pension Fund (GEPF) said on Tuesday it was concerned that data purportedly from its administrator, the Government Pensions Administration Agency (GPAA), has been released by ransomware group LockBit. â€œThe GEPF concerned with this alleged security breach, as it was informed by GPAA that no data breach had occurred when it was notified of an attempt […]