Hackers Exploit Microsoft Browser Bug to Deploy VBA Malware on Targeted PCs

An unidentified threat actor has been exploiting a now-patched zero-day flaw in Internet Explorer browser to deliver a fully-featured VBA-based remote access trojan RAT capable of accessing files stored in compromised Windows systems, and downloading and executing malicious payloads as part of an...

FIN7 Liquor Lure Compromises Law Firm with Backdoor

Financial cybercrime gang FIN7 has rebounded after the jailing of some key members, launching a campaign that uses as a lure a legal complaint involving the liquor company that owns Jack Daniels whiskey. The gambit successfully compromised at least one law firm, giving them a shot of the JSSLoade...

Windows 0-Days Used Against Dissidents in Israeli Broker’s Spyware

A set of unique spyware strains created by an Israeli firm and allegedly used by governments around the world to surveil dissidents has been defanged by Microsoft, the software giant said. The private company, called variously Candiru, Grindavik, Saito Tech and Taveta and dubbed “Sourgum” by...

Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing

A Moroccan man suspected of being “Dr HeX” – the prolific threat actor behind a nine-year cyber-blitz on thousands of victims through phishing, website defacing, malware development, fraud and carding – has been arrested. Interpol announced the bust – which took place in Morocco in May – on...

Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities

Law enforcement authorities with the Interpol have apprehended a threat actor responsible for targeting thousands of unwitting victims over several years and staging malware attacks on telecom companies, major banks, and multinational corporations in France as part of a global phishing and credit...

Hacker Wanted in the U.S. for Spreading Gozi Virus Arrested in Colombia

Colombian authorities on Wednesday said they have arrested a Romanian hacker who is wanted in the U.S. for distributing a virus that infected more than a million computers from 2007 to 2012. Mihai Ionut Paunescu aka "Virus", the individual in question, was detained at the El Dorado airport in...

DreamHost hosting firm exposed almost a billion sensitive records

By Habiba Rashid The database belonged to DreamHost's DreamPress managed WordPress hosting that was left exposed without any security authentication. This is a post from HackRead.com Read the original post: DreamHost hosting firm exposed almost a billion sensitive records...

Oh FCUK! Fashion Label, Medical Diagnostics Firm Latest REvil Victims

U.K.-based fashion brand French Connection, which advertises under the acronym “FCUK,” confirmed that it has been compromised by ransomware group REvil. Just hours later, Brazilian medical diagnostics firm Grupo Fleury announced it had the same misfortune. The twin attacks reveal shifting...

NFC Flaws Let Researchers Hack ATMs by Waving a Phone

Flaws in card reader technology let a security firm consultant wreak havoc with point-of-sale systems and more...

IKEA Fined $1.2M for Elaborate ‘Spying System’

IKEA’s French subsidiary was just hit with a $1.2 million fine after it was found guilty of a creepy systematic snooping scheme targeting customers, employees and even prospective hires. Prosecutors said in all, the company illegally surveilled about 400 people in total, according to the BBC. IKE...

A UK recruitment firm exposed sensitive applicants data for months

By Habiba Rashid The company was informed about the exposed data in December 2020 but it only responded and secured the data in March 2021. This is a post from HackRead.com Read the original post: A UK recruitment firm exposed sensitive applicants data for months...

Emotet Malware Destroys Itself From All Infected Computers

Emotet, the notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks, was automatically wiped from infected computers en masse following a European law enforcement operation. The development comes three months after a coordinated disruption of Emote...

A hacker claims to be selling sensitive data from OTP generating firm

By Habiba Rashid A hacker appears to be selling sensitive data they claim to have stolen from an OTP-generating company. Here's what we know so far! This is a post from HackRead.com Read the original post: A hacker claims to be selling sensitive data from OTP generating firm...

Ransomware Attack Creates Dutch Cheese Shortages

An Easter weekend ransomware attack on a food-logistics firm in the Netherlands has caused shortages of prepackaged cheese in supermarkets across the country. The largest Dutch grocery store chain had some bad news for a cheese-mad nation. “Due to a technical malfunction, there is limited...

ShinyHunters dump partial database of broker firm Upstox

By Waqas The hackers behind the breach is ShinyHunters while their target Upstox is India’s second-largest discount brokerage firm. This is a post from HackRead.com Read the original post: ShinyHunters dump partial database of broker firm Upstox...

Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets

Unpatched Fortinet VPN devices are being targeted in a series of attacks against industrial enterprises in Europe to deploy a new strain of ransomware called "Cring" inside corporate networks. At least one of the hacking incidents led to the temporary shutdown of a production site, said...

Hackers Setup Fake Cyber Security firm to Target InfoSec Experts

By Waqas Google believes the hackers are backed by the North Korean government. This is a post from HackRead.com Read the original post: Hackers Setup Fake Cyber Security firm to Target InfoSec Experts...

Firm calls cops on researcher for responsibly disclosing data leak

By Habiba Rashid While white-hat hackers get paid for reporting flaws this particular researcher was reported to the police after responsibly disclosing a data leak. This is a post from HackRead.com Read the original post: Firm calls cops on researcher for responsibly disclosing data leak...

New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between different network slices on a mobile operator's 5G network. AdaptiveMobile shared its finding...

SilverFish: Swiss firm accesses servers linked to SolarWinds hackers

By Deeba Ahmed The group used many different methods to attack their victims apart from exploiting the vulnerability in Texas-based firm SolarWinds software. This is a post from HackRead.com Read the original post: SilverFish: Swiss firm accesses servers linked to SolarWinds hackers...