39 matches found
Tarrask malware uses scheduled tasks for defense evasion
As Microsoft continues to track the high-priority state-sponsored threat actor HAFNIUM, new activity has been uncovered that leverages unpatched zero-day vulnerabilities as initial vectors. The Microsoft Detection and Response Team DART in collaboration with the Microsoft Threat Intelligence Cent...
Exploit for Code Injection in Vmware Spring_Framework
spring-core-rce Spring Core RCE – Simple exploitation Can...
Threat Group Takes Aim Again at Cloud Platform Provider Zoho
State-backed adversaries expanded attacks against cloud platform company Zoho and its ManageEngine ServiceDesk Plus software, a help desk and asset management solution. A recent campaign marks an uptick in attacks against the firm’s platform, which have also included past targeting of Zoho’s...
Updated: APT Exploitation of ManageEngine ADSelfService Plus Vulnerability
The Federal Bureau of Investigation FBI, CISA, and Coast Guard Cyber Command CGCYBER have updated the Joint Cybersecurity Advisory CSA published on September 16, 2021, which details the active exploitation of an authentication bypass vulnerability CVE-2021-40539 in Zoho ManageEngine ADSelfService...
Zoho’s ManagedEnginePassword Manager Flaw Torched by Godzilla Webshell, New Data Stealer
A new campaign is prying apart a known security vulnerability in the Zoho ManageEngine ADSelfService Plus password manager, researchers warned over the weekend. The threat actors have managed to exploit the Zoho weakness in at least nine global entities across critical sectors so far technology,...
Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit
At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on SSO solution. The spying...
Exploit for CVE-2021-3129
laravel-CVE-2021-3129-EXP CVE-2021-3129: One-click g...
TrickBot Banking Trojan Adds New Browser Manipulation Tools
The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...
Godzilla: Strike Zone - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Godzilla: Strike Zone published at the 'play' market has multiple vulnerabilities...
Godzilla Hacker Takes Down Several Pakistani Government Websites
While the rest of the world was engaged in cyber security and privacy, an Indian patriotic hacker targeted 43 major Pakistani Government official websites, including ‘President of Pakistan’, ‘Government of Pakistan’, 'Ministry of Defence’, and whole Ministry of Pakistan. Indian hacker Godzilla...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
Pakistan Government servers messed up after security breach
Today a cyber attack on Pakistan Government servers crash many Government departments's official websites including Ministry of Information Technology, Ministry of Railways, Ministry of Economic Affairs & Statistics, Ministry of Interior, Ministry of Religious Affairs, Ministry of Science and...
Unofficial Pakistan Intelligence website hacked
While the rest of the world engaged in cyber security conferences and Anonymous operations, an Indian patriotic hacker used the time to attack Unofficial Pakistan Intelligence agency ISI. Hacker going by name "Godzilla" today claimed to hack into one of the server belongs to ISI website...
Unofficial Pakistan Intelligence website hacked
While the rest of the world engaged in cyber security conferences and Anonymous operations, an Indian patriotic hacker used the time to attack Unofficial Pakistan Intelligence agency ISI. Hacker going by name "Godzilla" today claimed to hack into one of the server belongs to ISI website...
Hacker leaks Bangladesh Intelligence classified Emails
Indian hacker, Godzilla once again hit Bangladesh government server. Hacker told us about his latest cyber attack on Directorate General of Forces Intelligence Bangladesh DGFI - www.dgfi.gov.bd server . He claimed to back up all confidential mails in the server and list of all their agents around...
Bangladesh military Server and internal network Compromised
Indian Hacker Godzilla aka G.O.D hacked into Bangladesh Army servers, belongs to domain www.army.mil.bd and leak Internal Network Information via a note. Hacker also publicly posted their Cisco Router passwords and Mac-Address of all machines within the network. We talked with the hacker to know...
More than 100 Pakistani Government Sites Under Malware attack
More than 100 Pakistani Government Sites Under Malware attack Website Malware : A newer form of malware is what can be found attacking websites today. In the old days malware was mostly in the form of computer viruses. In today's age of globalization, malware starts to target websites and mobile...
More than 100 Pakistani Government Sites Under Malware attack
More than 100 Pakistani Government Sites Under Malware attack Website Malware : A newer form of malware is what can be found attacking websites today. In the old days malware was mostly in the form of computer viruses. In today's age of globalization, malware starts to target websites and mobile...