4316 matches found
What is API Abuse ❓ Prevention measures.
APIs are paramount for constructing a steadfast and constant communication bridge that empowers devices to pass-on desired information seamlessly. Hackers adopt many ways to exploit the APIs and corrupt the targeted device. This API exploitation is a potential threat to API security and needs...
FIN8 Hacker group using new ‘White Rabbit’ Ransomware against U.S. Banks
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. White Rabbit is a ransomware family that has only recently been discovered. It could be a subsidiary project of the FIN8 hacking gang. A ransomware expert seeking for a sample of the malware made the first public disclosure...
Russian Hackers Heavily Using Malicious Traffic Direction System to Distribute Malware
Potential connections between a subscription-based crimeware-as-a-service CaaS solution and a cracked copy of Cobalt Strike have been established in what the researchers suspect is being offered as a tool for its customers to stage post-exploitation activities. Prometheus, as the service is calle...
FIN8 Hackers Spotted Using New 'White Rabbit' Ransomware in Recent Attacks
The financially motivated FIN8 actor, in all likelihood, has resurfaced with a never-before-seen ransomware strain called "White Rabbit" that was recently deployed against a local bank in the U.S. in December 2021. That's according to new findings published by Trend Micro, calling out the malware...
What is API Abuse ❓ Prevention measures.
APIs are paramount for constructing a steadfast and constant communication bridge that empowers devices to pass-on desired information seamlessly. Hackers adopt many ways to exploit the APIs and corrupt the targeted device. This API exploitation is a potential threat to API security and needs...
An Examination of the Bug Bounty Marketplace
Heres a fascinating report: "Bounty Everything: Hackers and the Making of the Global Bug Marketplace." From a summary: …researchers Ryan Ellis and Yuan Stevens provide a window into the working lives of hackers who participate in “bug bounty” programs -- programs that hire hackers to discover an...
Russia Takes Down REvil Hackers—as Ukraine Tensions Mount
Over a dozen alleged members of the notorious ransomware group have been arrested, but the Kremlin's critics are wary of the underlying motivation...
North Korean Hackers Stole Millions from Cryptocurrency Startups Worldwide
Operators associated with the Lazarus sub-group BlueNoroff have been linked to a series of cyberattacks targeting small and medium-sized companies worldwide with an aim to drain their cryptocurrency funds, in what's yet another financially motivated operation mounted by the prolific North Korean...
Hot wallet hack: Hackers steal $18.7m from Animoca’s Lympo NTF platform
By Waqas The hackers gained access to NFT platform Lympos operational hot wallet on Monday and managed to steal 165.2… This is a post from HackRead.com Read the original post: Hot wallet hack: Hackers steal $18.7m from Animocas Lympo NTF platform...
North Korean Hackers Stole Nearly $400M in Crypto Last Year
The regime had a “banner year,” thanks to skyrocketing cryptocurrency values and a new generation of vulnerable startups...
Iranian Hackers Exploit Log4j Vulnerability to Deploy PowerShell Backdoor
An Iranian state-sponsored actor has been observed scanning and attempting to abuse the Log4Shell flaw in publicly-exposed Java applications to deploy a hitherto undocumented PowerShell-based modular backdoor dubbed "CharmPower" for follow-on post-exploitation. "The actor's attack setup was...
FBI warns of hackers mailing malicious USB drives to spread ransomware
By Deeba Ahmed FBI's warning highlights the fact that one should never insert an unknown USB flash drive in their PCs. This is a post from HackRead.com Read the original post: FBI warns of hackers mailing malicious USB drives to spread ransomware...
North Korean Hackers Start New Year with Attacks on Russian Foreign Ministry
A North Korean cyberespionage group named Konni has been linked to a series of targeted attacks aimed at the Russian Federation's Ministry of Foreign Affairs MID with New Year lures to compromise Windows systems with malware. "This activity cluster demonstrates the patient and persistent nature o...
Hackers Are Exploiting a Flaw Microsoft Fixed 9 Years Ago
Unless you go out of your way to install the patch, your system could be exposed...
N Korean hackers stole $1.7 billion from cryptocurrency exchanges
By Waqas Experts believe North Korean hackers are keeping the stolen funds as a long-term investment. This is a post from HackRead.com Read the original post: N Korean hackers stole $1.7 billion from cryptocurrency exchanges...
Missing of _userUpdate in unwrapFor in WJLP.sol
Handle UncleGrandpa925 Vulnerability details Impact Users' rewards in Wrapped JLP will be miscalculated. Hackers can exploit this to steal users' rewards. All WJLP's unwrapFor transactions will trigger the bug. Location Function unwrapFor in WJLP.sol Explanation of the bug So the nature of this...
Irani and Chinese State Hackers Exploiting Log4j Vulnerability
By Waqas According to Mandiant's John Hultquist, Iranian state hackers are specifically aggressive with this Log4j vulnerability. This is a post from HackRead.com Read the original post: Irani and Chinese State Hackers Exploiting Log4j Vulnerability...
How to Buy Precious Patching Time as Log4j Exploits Fly
Sure, Apache got a patch out fast when the Log4j logging library vulnerability – aka Javageddon or “up there with Shellshock” – exploded last week. But emergency patches take days best-case scenario or weeks to install: plenty of time for attackers to do their worst. Which they lickety-split did,...
‘Seedworm’ Attackers Target Telcos in Asia, Middle East
Attackers targeting telcos across the Middle East and Asia for the past six months are linked to Iranian state-sponsored hackers, according to researchers. The cyberespionage campaigns leverage a potent cocktail of spear phishing, known malware and legitimate network utilities that are leveraged ...
Hackers actively exploiting 0-day in Ubiquitous Apache Log4j tool
By Waqas Apache has released Log4j version 2.15.0 to address the RCE vulnerability and users are urged to apply the update ASAP. This is a post from HackRead.com Read the original post: Hackers actively exploiting 0-day in Ubiquitous Apache Log4j tool...