Fake Chrome updates spread malware

Compromised websites are causing big headaches for Chrome users. A campaign running since November 2022 is using hacked sites to push fake web browser updates to potential victims. Researcher Rintaro Koike says this campaign has now expanded to also target those who speak Korean, Spanish, and...

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to $20,000 as a way to evade Google Play Store defenses. "The most popular application categories to hide malware and unwanted software include cryptocurrency trackers,...

Redirection Roulette: Thousands of hijacked websites in East Asia redirecting visitors to other sites

Since early September 2022, tens of thousands of websites aimed at East Asian audiences have been hacked, redirecting hundreds of thousands of their users to adult-themed content...

MAL-2023-4818 Malicious code in paypalhacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 286a7225ac94f26954b59a86d445121c406e81ae8f1e0d29e1313cddb84cb7ce EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3718 Malicious code in hackedstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac8172f62729e26ba667190c413cf7a676a52e58bc83c9d875171bb1ec8428dc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3712 Malicious code in hackedload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22a49c1baaaf6972e16008c812a5e9f52a515e5c2c93a9bb390fa15765ed9a46 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Anonymous: Russian Radio Stations Hacked with Fake Missile Alerts

By Deeba Ahmed Several radio stations in Russia were reportedly hacked to send fake missile alerts across the country, the government has claimed. This is a post from HackRead.com Read the original post: Anonymous: Russian Radio Stations Hacked with Fake Missile Alerts...

Indian Ticketing Platform RailYatri Hacked – 31 Million Impacted

By Waqas The RailYatri hack took place in December 2022, but the stolen data has only been leaked earlier today on a prominent hacker forum. This is a post from HackRead.com Read the original post: Indian Ticketing Platform RailYatri Hacked - 31 Million Impacted...

Iranian State TV Hacked During President’s Speech on Revolution Day

By Waqas The hackers disrupted the State TV broadcast and instead aired the slogan “Death to Khamenei” and urged people to withdraw their money from government banks. This is a post from HackRead.com Read the original post: Iranian State TV Hacked During Presidents Speech on Revolution Day...

Weee! Grocery Service Hacked, 1.1m Accounts Leaked

By Habiba Rashid The stolen Weee! database has been leaked on the infamous BreachForums and Russian-speaking cybercrime forums. This is a post from HackRead.com Read the original post: Weee! Grocery Service Hacked, 1.1m Accounts Leaked...

Hacked or malicious owner can steal all tokens

Lines of code Vulnerability details Tokens for all active drips are stored in the DripsHub contract. Since DripsHub is an upgradeable ERC1967Proxy, a malicious or hacked owner can simply upgrade the contract to include e.g., the following function: function stealTokensIERC20 token, address to,...

Over 4,500 WordPress Sites Hacked to Redirect Visitors to Sketchy Ad Pages

A massive campaign has infected over 4,500 WordPress websites as part of a long-running operation that's been believed to be active since at least 2017. According to GoDaddy-owned Sucuri, the infections involve the injection of obfuscated JavaScript hosted on a malicious domain named...

Administrator of RSOCKS Proxy Botnet Pleads Guilty

Denis Emelyantsev, a 36-year-old Russian man accused of running a massive botnet called RSOCKS that stitched malware into millions of devices worldwide, pleaded guilty to two counts of computer crime violations in a California courtroom this week. The plea comes just months after Emelyantsev was...

Online Casinos DraftKings and BetMGM Hacked; Data of Millions at Risk

By Waqas In BetMGM's case, hackers are selling data of 1.57 million customers, while data of 68,000 DraftKings customers is also up for grabs. This is a post from HackRead.com Read the original post: Online Casinos DraftKings and BetMGM Hacked; Data of Millions at Risk...

Hacked Ring Cameras Used in Livestreaming Swatting Attacks

By Waqas Per the police, the two suspects were aided by a third man who obtained the login credentials of victims’ Yahoo accounts and identified if they owned a Ring doorbell camera. This is a post from HackRead.com Read the original post: Hacked Ring Cameras Used in Livestreaming Swatting Attack...

Instagram Rolls Out dedicated Page To Help Users Regain Hacked Accounts

By Habiba Rashid Instagram has launched new account support for users who may have lost access to their accounts. This is a post from HackRead.com Read the original post: Instagram Rolls Out dedicated Page To Help Users Regain Hacked Accounts...

An Alleged Russian Smuggling Ring Was Uncovered in New Hampshire

Plus: An FBI platform got hacked, an ex-Twitter employee is sentenced for espionage, malicious Windows 10 installers circulate in Ukraine, and more...

LastPass Security Breach

The company was hacked, and customer information accessed. No passwords were compromised...

This Malicious App Abused Hacked Devices to Create Fake Accounts on Multiple Platforms

A malicious Android SMS application discovered on the Google Play Store has been found to stealthily harvest text messages with the goal of creating accounts on a wide range of platforms like Facebook, Google, and WhatsApp. The app, named Symoo com.vanjan.sms, had over 100,000 downloads and...

Iran’s Fars News Agency website hacked as part of anti-govt protests

By Habiba Rashid The hackers from Black Reward Team are also claiming to have deleted nearly 250 terabytes of data from the website from its servers and computers. This is a post from HackRead.com Read the original post: Irans Fars News Agency website hacked as part of anti-govt protests...