A week in security (March 05 – March 11)

Last week on Malwarebytes Labs, we paid homage to several women in tech, including some of our very own, on International Women's Day and shared their stories. We also looked into an adware posing as an Android app that claims to live stream the 2018 Winter Olympics, exposed scammers that go by t...

How Dutch Police Busted Hansa Dark Web Marketplace

By Waqas Hansa was once the second largest dark web marketplace after This is a post from HackRead.com Read the original post: How Dutch Police Busted Hansa Dark Web Marketplace...

Lookout: Dark Caracal Points To APT Actors Moving To Mobile Targets

CANCUN, Mexico – On the heels of global cyber espionage campaign Dark Caracal, security firm Lookout is sounding the alarm on how it is indicative of advanced persistent threats moving from desktop platforms to mobile platforms. Dark Caracal, which was first discovered by researchers in January, ...

Leaked NSA Dump Also Contains Tools Agency Used to Track Other Hackers

A years ago when the mysterious hacking group 'The Shadow Brokers' dumped a massive trove of sensitive data stolen from the US intelligence agency NSA, everyone started looking for secret hacking tools and zero-day exploits. A group of Hungarian security researchers from CrySyS Lab and Ukatemi ha...

Gozi ISFB Remains Active in 2018, Leverages "Dark Cloud" Botnet For Distribution

This blog post was authored by Edmund Brumaghin and Holger Unterbrink, with contributions from Adam Weller. Executive Summary Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years. Banking trojans are a type of malware tha...

3,000 Databases with 200 Million Unique accounts found on Dark Web

By Waqas Dark Web is a strange place where one can conduct This is a post from HackRead.com Read the original post: 3,000 Databases with 200 Million Unique accounts found on Dark Web...

The Perfect Storm:  Cyberspace Requires Defense in the Cloud

Cyberspace is a free-fire zone. Corporations are regularly under siege from multiple threat actors. The cyber-arms bazaar that flourishes around the world has allowed criminals and nations to wage long-term campaigns against corporations and government agencies. These attackers stalk businesses a...

Dark Web’s worst pedophile sentenced to 32 years in prison

By Carolina Birmingham Crown Court UK has jailed a dark web pedophile for This is a post from HackRead.com Read the original post: Dark Web's worst pedophile sentenced to 32 years in prison...

This Week in Security News: Senate Hearings and Equifax Breaches

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, leaders of six security agencies testified before the Senate Intelligence Committee, the Equifax hack grew in severity, and hackers used the...

Dark Web’s largest cybercrime group indicted after stealing $530M

By Waqas Infraud organization is the largest group of cybercriminals on Dark This is a post from HackRead.com Read the original post: Dark Web’s largest cybercrime group indicted after stealing $530M...

dark-chi.com XSS vulnerability

Open Bug Bounty ID: OBB-548844 Description| Value ---|--- Affected Website:| dark-chi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

This Week in Security News: Trojans and Cyber Hacks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Read on for the latest on trojanized malware, smart phone hacks, and cybersecurity legislation. Dark Caracal Group Revealed: Group Used Trojanized...

Cybercriminals Selling Social Security Numbers of Infants on Dark Web

By Waqas Dark Web has become a creepy place since it is This is a post from HackRead.com Read the original post: Cybercriminals Selling Social Security Numbers of Infants on Dark Web...

Beware! Undetectable CrossRAT malware targets Windows, MacOS, and Linux systems

Are you using Linux or Mac OS? If you think your system is not prone to viruses, then you should read this. Wide-range of cybercriminals are now using a new piece of 'undetectable' spying malware that targets Windows, macOS, Solaris and Linux systems. Just last week we published a detailed articl...

Expert: IoT Botnets the Work of a ‘Vast Minority’

In December 2017, the U.S. Department of Justice announced indictments and guilty pleas by three men in the United States responsible for creating and using Mirai, a malware strain that enslaves poorly-secured "Internet of Things" or IoT devices like security cameras and digital video recorders f...

WordPress Dark Mode plugin <=1.6 - Multiple stored Cross-Site Scripting (XSS) vulnerabilities

Multiple stored Cross-Site Scripting XSS vulnerabilities found by d4wner in WordPress Dark Mode plugin versions =1.6. XSS exists via the wp-admin/profile.php darkmodestart parameter and darkmodeend parameter. Solution Update the WordPress Dark Mode plugin to the latest available version at least...

January 19, 2017 – Morning Cyber Coffee Headlines – “Puppies” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 19, 2018 - Headlines The Five Laws Of Cybersecurity - Forbes 3 things y...

Researchers Uncover Government-Sponsored Mobile Hacking Group Operating Since 2012

A global mobile espionage campaign collecting a trove of sensitive personal information from victims since at least 2012 has accidentally revealed itself—thanks to an exposed server on the open internet. It's one of the first known examples of a successful large-scale hacking operation of mobile...

6 years jail time for ‘one of the largest’ dark web drug dealer

By Carolina The 40-year-old David Ryan Burchard from Merced, a dark web vendor This is a post from HackRead.com Read the original post: 6 years jail time for ‘one of the largest dark web drug dealer...

Sprawling Mobile Espionage Campaign Targets Android Devices

A massive mobile espionage campaign has been collecting troves of sensitive personal information since 2012, according to a new report from the Electronic Frontier Foundation and security firm Lookout. Dubbed Dark Caracal, the advanced persistent threat APT campaign has managed to steal hundreds ...