Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers

A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan RAT on compromised systems. Attributing the intrusions to a threat actor...

Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees

An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of a years-long social engineering and targeted malware campaign. Enterprise security firm Proofpoint...

Biden Puts a $10M Bounty on Foreign Hackers

Plus: REvil goes dark, spyware runs amok, and more of the week's top security news...

Hackers Got Past Windows Hello by Tricking a Webcam

The security researchers used infrared photos and third-party hardware to best Microsoft’s facial-recognition tech...

SolarWinds hackers exploited iOS 0-day to compromise iPhones

By Deeba Ahmed According to Google, SolarWinds hackers exploited an iOS 0-day vulnerability to hack iPhones and made millions from targeting phones worldwide. This is a post from HackRead.com Read the original post: SolarWinds hackers exploited iOS 0-day to compromise iPhones...

Facebook Suspends Accounts Used by Iranian Hackers to Target US Military Personnel

Facebook on Thursday disclosed it dismantled a "sophisticated" online cyber espionage campaign conducted by Iranian hackers targeting about 200 military personnel and companies in the defense and aerospace sectors in the U.S., U.K., and Europe using fake online personas on its platform. The socia...

U.S Govt launches new website to fight ransomware, help victims

By Sudais Asif The US government is also offering $10 million in rewards for information on foreign hackers involved in ransomware attacks on the United States. This is a post from HackRead.com Read the original post: U.S Govt launches new website to fight ransomware, help victims...

The SolarWinds Hackers Used an iOS Flaw to Compromise iPhones

Security researchers say the group exploited a zero-day in Apple’s operating system to target European government officials over LinkedIn...

Facebook Catches Iranian Spies Catfishing US Military Targets

The hackers posed as recruiters, journalists, and hospitality workers to lure their victims...

Chinese Hackers Exploited Latest SolarWinds 0-Day in Targeted Attacks

Microsoft on Tuesday disclosed that the latest string of attacks targeting SolarWinds Serv-U managed file transfer service with a now-patched remote code execution RCE exploit is the handiwork of a Chinese threat actor dubbed "DEV-0322." The revelation comes days after the Texas-based IT monitori...

Managed Service Providers Used in Coordinated, Mass Ransomware Attack Impacting Hundreds of Companies

Rapid7 is aware of and tracking all information surrounding a coordinated, mass ransomware attack reported to be affecting hundreds of organizations. Huntress Labs is maintaining a public Reddit thread documenting the scope and triage of an event that has, as of the original post date see updates...

Iranian Hackers Posing as Scholars Target Professors and Writers in Middle-East

A sophisticated social engineering attack undertaken by an Iranian-state aligned actor targeted think tanks, journalists, and professors with an aim to solicit sensitive information by masquerading as scholars with the University of London's School of Oriental and African Studies SOAS. Enterprise...

The Everyday IT Tools That Can Offer ‘God Mode’ to Hackers

Attackers are increasingly attuned to the power and potential of remote management software...

#NoFilter: Exposing the Tactics of Instagram Account Hackers

What tactics do Instagram account hackers use? What do these cybercriminals do with stolen accounts? How can users protect their accounts? We look into Instagram account hacking incidents from a security researcher’s perspective and share recommendations for users of Instagram and other social...

Hackers disabling Macro security warnings in new malspam campaign

By Waqas This means hackers are downloading/executing malicious DLLs/ZLoader without any malicious code in the spammed attachment macro. This is a post from HackRead.com Read the original post: Hackers disabling Macro security warnings in new malspam campaign...

Hackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files

While it's a norm for phishing campaigns that distribute weaponized Microsoft Office documents to prompt victims to enable macros in order to trigger the infection chain directly, new findings indicate attackers are using non-malicious documents to disable security warnings prior to executing mac...

Hackers leak scraped data of 87,000 GETTR users

By Deeba Ahmed GETTR has been attacked twice since its launch on July 4th, 2021. Here's what Hackread.com's exclusive analysis reveals. This is a post from HackRead.com Read the original post: Hackers leak scraped data of 87,000 GETTR users...

Details of RCE Bug in Adobe Experience Manager Revealed

Details of an Adobe zero-day bug found in its content-management solution Adobe Experience Manager AEM, which affected customers ranging from Mastercard, LinkedIn and PlayStation, were revealed Monday. The bug, patched in May, allowed hackers to bypass authentication protection and execute code...

Microsoft Edge Bug Could've Let Hackers Steal Your Secrets for Any Site

Microsoft last week rolled out updates for the Edge browser with fixes for two security issues, one of which concerns a security bypass vulnerability that could be exploited to inject and execute arbitrary code in the context of any website. Tracked as CVE-2021-34506 CVSS score: 5.4, the weakness...

SolarWinds Hackers Breach Microsoft Customer Support to Target its Customers

In yet another sign that the Russian hackers who breached SolarWinds network monitoring software to compromise a slew of entities never really went away, Microsoft said the threat actor behind the malicious cyber activities used password spraying and brute-force attacks in an attempt to guess...