A Telegram Bot Told Iranian Hackers When They Got a Hit

APT35 may not be the most dangerous group out there, but they've got a new phishing trick...

X (Formerly Twitter): Blind XSS on Twitter's internal Jira panel at ████ allows exfiltration of hackers reports and other sensitive data

The researcher demonstrated a vulnerability in Twitter's Jira instance where user supplied information was handled in an improper manner, rendering the application vulnerable to blind XSS. By crafting a bug report and sending it to Twitter it was possible to locate this proof of concept code with...

Why Businesses Need To Go Lean With Cybersecurity

By Waqas As hackers get smarter, cybersecurity becomes a key concern - Let's dig deeper into why businesses need to go lean with cybersecurity. This is a post from HackRead.com Read the original post: Why Businesses Need To Go Lean With Cybersecurity...

Iran-linked hackers hit Israeli, US and EU defense tech firm

By Deeba Ahmed Microsoft has warned that hackers linked to Iran are mainly targeting Office 365 clients in defense technology firms. This is a post from HackRead.com Read the original post: Iran-linked hackers hit Israeli, US and EU defense tech firm...

Microsoft Warns of Iran-Linked Hackers Targeting US and Israeli Defense Firms

An emerging threat actor likely supporting Iranian national interests has been behind a password spraying campaign targeting U.S., E.U., and Israeli defense technology companies, with additional activity observed against regional ports of entry in the Persian Gulf as well as maritime and cargo...

New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers

Chinese cyber espionage group APT41 has been linked to seemingly disparate malware campaigns, according to fresh research that has mapped together additional parts of the group's network infrastructure to hit upon a state-sponsored campaign that takes advantage of COVID-themed phishing lures to...

Ransomware Hackers Who Attacked Over 100 Companies Arrested in Ukraine

Law enforcement agencies have announced the arrest of two "prolific ransomware operators" in Ukraine who allegedly conducted a string of targeted attacks against large industrial entities in Europe and North America since at least April 2020, marking the latest step in combating ransomware...

Hackers exploit 2FA flaw to steal crypto from 6,000 Coinbase users

By Waqas working to reimburse the customers for the funds they have lost and help them regain control of their accounts. Here's what happened. This is a post from HackRead.com Read the original post: Hackers exploit 2FA flaw to steal crypto from 6,000 Coinbase users...

Chinese Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users

A formerly unknown Chinese-speaking threat actor has been linked to a long-standing evasive operation aimed at South East Asian targets as far back as July 2020 to deploy a kernel-mode rootkit on compromised Windows systems. Attacks mounted by the hacking group, dubbed GhostEmperor by Kaspersky,...

UPchieve: Password Reuse

Issue Description: A user is able to reuse any of their old passwords during the change passwords process. URL & Location: https://hackers.upchieve.org/resetpassword POC video : recording-1632907447530.webm @thug645 Impact Misconfiguration...

Microsoft warns of Nobelium hackers using FoggyWeb backdoor

By Waqas Microsoft warns of the FoggyWeb backdoor used by Nobelium, the same hacking group behind SolarWinds supply-chain attacks. This is a post from HackRead.com Read the original post: Microsoft warns of Nobelium hackers using FoggyWeb backdoor...

The Proliferation of Zero-days

The MIT Technology Review is reporting that 2021 is a blockbuster year for zero-day exploits: One contributing factor in the higher rate of reported zero-days is the rapid global proliferation of hacking tools. Powerful groups are all pouring heaps of cash into zero-days to use for themselves --...

Hackers hit Russian ministry, rocket center using MSHTML vulnerability

By Waqas Microsoft Office zero-day also dubbed MSHTML attack exploited to target Russian government including Interior ministry and State Rocket Center. This is a post from HackRead.com Read the original post: Hackers hit Russian ministry, rocket center using MSHTML vulnerability...

Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters

Law enforcement agencies in Italy and Spain have dismantled an organized crime group linked to the Italian Mafia that was involved in online fraud, money laundering, drug trafficking, and property crime, netting the gang about €10 million $11.7 million in illegal proceeds in just a year. "The...

SSID Stripping flaw lets hackers mimic real wireless access points

By Deeba Ahmed SSID Stripping has emerged as a significant threat because it impacts major platforms like MS Windows, macOS, Apple iOS, Ubuntu, and Android. This is a post from HackRead.com Read the original post: SSID Stripping flaw lets hackers mimic real wireless access points...

Dangers of DNS poisoning and how to prevent it

By Owais Sultan DNS poisoning is also known as a spoofing attack carried out by hackers who imitate another device, client, or user by poisoning the DNS. This is a post from HackRead.com Read the original post: Dangers of DNS poisoning and how to prevent it...

Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’

This is Part I of a two-part series on how cybercrooks embrace and use cryptocurrency. To read Part II, please click here. It’s no secret: Hackers are out to make money. Over the summer, it seemed there was practically a new ransomware attack every day of the week. Whether it be Colonial Pipeline...

Hackers dump login credentials of Fortinet VPN users in plain-text

By Waqas Fortinet VPN users are urged to reset their passwords as the company has acknowledged the data to be legitimate. This is a post from HackRead.com Read the original post: Hackers dump login credentials of Fortinet VPN users in plain-text...

More Detail on the Juniper Hack and the NSA PRNG Backdoor

We knew the basics of this story, but its good to have more detail. Heres me in 2015 about this Juniper hack. Heres me in 2007 on the NSA backdoor...

A week in security (August 30 – September 5)

Last week on Malwarebytes Labs ProxyToken: another nail-biter from Microsoft Exchange Macs turn on apps signed by Symantec, treat them as malware Google Play sign-ins can be abused to track another person’s movements FTC bans SpyFone and its CEO from continuing to sell stalkerware BrakTooth...