2024-03-26 Post a Comment

Hackers poison source code from largest Discord bot platform

By Bill Toulas: The Top.gg Discord bot community with over 170,000 members has been impacted by a supply-chain attack aiming to infect developers with malware that steals sensitive information. The threat actor has been using several tactics, techniques, and procedures (TTPs) over the years including hijacking GitHub accounts, distributing malicious Python packages, using a fake Python infrastructure, and social engineering. One of the more recent victims of the attacker is Top.gg, a popular […]

Cyber security

2024-03-13 Post a Comment

Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware

By Bill Toulas: Hackers are breaching WordPress sites by exploiting a vulnerability in outdated versions of the Popup Builder plugin, infecting over 3,300 websites with malicious code. The flaw leveraged in the attacks is tracked as CVE-2023-6000, a cross-site scripting (XSS) vulnerability impacting Popup Builder versions 4.2.3 and older, which was initially disclosed in November 2023. A Balada Injector campaign uncovered at the start of the year exploited the particular […]

Cyber security

2024-02-10 Post a Comment

Government hackers targeted iPhone owners with zero-days, Google says

Lorenzo Franceschi-Bicchierai@lorenzofb Government hackers last year exploited three unknown vulnerabilities in Apple’s iPhone operating system to target victims with spyware developed by a European startup, according to Google. On Tuesday, Google’s Threat Analysis Group, the company’s team that investigates nation-backed hacking, published a report analyzing several government campaigns conducted with hacking tools developed by several spyware and exploit sellers, including Barcelona-based startup Variston. In one of the campaigns, according to Google, government […]

Cyber security

2024-02-10 Post a Comment

Hackers steal data of 2 million in SQL injection, XSS attacks

By Bill Toulas A threat group named ‘ResumeLooters’ has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site scripting (XSS) attacks. The attackers mainly focus on the APAC region, targeting sites in Australia, Taiwan, China, Thailand, India, and Vietnam to steal job seeker’s names, email addresses, phone numbers, employment history, education, and other relevant information. […]

alt=Alt text: "Cloud-based software for remote worker management - anydesk."

Cyber security

2024-02-08 Post a Comment

AnyDesk says hackers breached its production servers, reset passwords

By Lawrence Abrams AnyDesk confirmed today that it suffered a recent cyberattack that allowed hackers to gain access to the company’s production systems. BleepingComputer has learned that source code and private code signing keys were stolen during the attack. AnyDesk is a remote access solution that allows users to remotely access computers over a network or the internet. The program is very popular with the enterprise, which use it for […]

Hackers poison source code from largest Discord bot platform

Like this:

Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware

Like this:

Government hackers targeted iPhone owners with zero-days, Google says

Like this:

Hackers steal data of 2 million in SQL injection, XSS attacks

Like this:

Hackers poison source code from largest Discord bot platform

Please Share this:

Like this:

Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware

Please Share this:

Like this:

Government hackers targeted iPhone owners with zero-days, Google says

Please Share this:

Like this:

Hackers steal data of 2 million in SQL injection, XSS attacks

Please Share this:

Like this:

AnyDesk says hackers breached its production servers, reset passwords

Please Share this:

Like this: