New MaliBot Android Malware Found Stealing Personal, Banking Data

By Deeba Ahmed MaliBot Android Malware is also capable of bypassing 2FA Two-factor authentication. F5 Labs researchers have discovered a new… This is a post from HackRead.com Read the original post: New MaliBot Android Malware Found Stealing Personal, Banking Data...

How to configure cPanel and WHM Panel on your VPS

By Owais Sultan What is VPS? VPS can be a great solution for the web presence of your business, blog, e-commerce,… This is a post from HackRead.com Read the original post: How to configure cPanel and WHM Panel on your VPS...

142 Million MGM Resorts Records Leaked on Telegram for Free Download

By Waqas As seen by Hackread.com and researchers at VPNMentor, the leaked data includes sensitive PII information of MGM resort… This is a post from HackRead.com Read the original post: 142 Million MGM Resorts Records Leaked on Telegram for Free Download...

Predator Spyware Using Zero-day to Target Android Devices

By Deeba Ahmed Spyware developer firm Cytrox is under Googles radar for developing exploits against five 0-day flaws in Android and… This is a post from HackRead.com Read the original post: Predator Spyware Using Zero-day to Target Android Devices...

DDoS Attacks by Hacktivists Disrupted Russian Alcohol Supply Chain

By Deeba Ahmed Attackers from the Ukrainian IT army successfully disrupted alcohol shipments in Russia by targeting EGAIS, the country’s primary… This is a post from HackRead.com Read the original post: DDoS Attacks by Hacktivists Disrupted Russian Alcohol Supply Chain...

“Computer malfunction” Caused Death of 27,000 Chickens

By Deeba Ahmed A "computer malfunction" in the broiler shed ventilation system caused the death of over 27,000 chickens, while the… This is a post from HackRead.com Read the original post: "Computer malfunction" Caused Death of 27,000 Chickens...

New Scam Utilizing AI-Generated Images to Represent Fake Law Firm

By Deeba Ahmed Hackread.com earlier reported a website designed by software engineer Philip Wang that can create realistic faces of people… This is a post from HackRead.com Read the original post: New Scam Utilizing AI-Generated Images to Represent Fake Law Firm...

LemonDuck Cryptomining Botnet Hunting for Misconfigured Docker APIs

By Deeba Ahmed LemonDuck cryptomining botnet previously targeted Microsoft Exchange servers. Now it is targeting the worlds leading containerization platform, Docker.… This is a post from HackRead.com Read the original post: LemonDuck Cryptomining Botnet Hunting for Misconfigured Docker APIs...

BlackGuard Password Stealing Malware Being Sold on Russian Hacking Forums

By Deeba Ahmed Zscaler ThreatLabz researchers have discovered sophisticated new info stealing malware available as malware-as-a-service on Russian hacking forums. In… This is a post from HackRead.com Read the original post: BlackGuard Password Stealing Malware Being Sold on Russian Hacking Forums...

Microsoft and Okta Confirm Data Breach Claims by LAPSUS$

By Deeba Ahmed Both companies have confirmed the breach after Lapsus$ hackers leaked screenshots of Oktas internal system and source code… This is a post from HackRead.com Read the original post: Microsoft and Okta Confirm Data Breach Claims by LAPSUS$...

Anonymous hacked Russian TV and streaming services with Ukraine war footage

By Waqas According to Anonymous, three Russian-state TV channels, Russia 24, Moscow 24, and Channel One and two Netflix-like Russian… This is a post from HackRead.com Read the original post: Anonymous hacked Russian TV and streaming services with Ukraine war footage...

Samsung confirms data breach as Lapsus$ hackers leak its source code

By Waqas In total, Lapsus$ hackers have leaked 189 GB worth of sensitive data, while Samsung has confirmed the incident;… This is a post from HackRead.com Read the original post: Samsung confirms data breach as Lapsus$ hackers leak its source code...

Ex-Crypto CEO accused of 2016’s $11 billion Ethereum DAO hack

By Waqas According to journalist Laura Shin and Blockchain data security firm Chainalysis, in 2016, a programmer, Toby Hoenisch, allegedly… This is a post from HackRead.com Read the original post: Ex-Crypto CEO accused of 2016s $11 billion Ethereum DAO hack...

Over 500 Magento sites hacked in payment skimmer attack

By Waqas Sansec researchers have urged website owners to stop using Magento 1 since Adobe has stopped releasing security updates… This is a post from HackRead.com Read the original post: Over 500 Magento sites hacked in payment skimmer attack...

VirusTotal hacking – Hackers can access trove of stolen credentials on VirusTotal

By Waqas Dubbed VirusTotal Hacking; the attack allowed researchers to access 1,000,000 login credentials exfiltrated by unencrypted crypto wallets and… This is a post from HackRead.com Read the original post: VirusTotal hacking - Hackers can access trove of stolen credentials on VirusTotal...

Cloud video platform abused in web skimmer attack against real estate sites

By Deeba Ahmed New Web Skimmer Campaign Exploiting Cloud Video Distribution Supply Chain to Target Real Estate Sites. This is a post from HackRead.com Read the original post: Cloud video platform abused in web skimmer attack against real estate sites...

T-Mobile’s latest data breach exposed users to SIM swapping attacks

By Waqas T-Mobile is the only telecom giant to suffer at least three known data breaches in 2021. This is a post from HackRead.com Read the original post: T-Mobiles latest data breach exposed users to SIM swapping attacks...

Ghana govt agency exposed 700k citizens’ data in a database mess up

By Deeba Ahmed Ghana’s National Service Secretariate - NSS - exposed 55GB worth of citizens' data when an AWS S3 bucket used by the Secretariate suffered misconfiguration. This is a post from HackRead.com Read the original post: Ghana govt agency exposed 700k citizens data in a database mess up...

Romanian arrested for ransomware attacks and data theft

By Deeba Ahmed Europol has confirmed arresting a Romanian national for targeting an IT firm in the country. This is a post from HackRead.com Read the original post: Romanian arrested for ransomware attacks and data theft...

Indian PM Modi’s Twitter Account HACKED for Bitcoin scam

By Deeba Ahmed This was the second time that a Twitter account linked to PM Modi got compromised for a Bitcoin-related scam. This is a post from HackRead.com Read the original post: Indian PM Modis Twitter Account HACKED for Bitcoin scam...

Malvertising attack distributes malicious Chrome extensions, backdoors

By Waqas Researchers believe that the campaign has been active since 2018, and since then, the malware has been under development constantly. Cisco Talos researchers have identified malvertising campaigns using fake installers of popular games and applications, such as WeChat, Viber, Battlefield,...

About 10 million Android devices found infected with Cynos malware

By Waqas In total, researchers have identified around 190 malware-infected games, some of which were designed to target Russian and Chinese users. This is a post from HackRead.com Read the original post: About 10 million Android devices found infected with Cynos malware...

How to Integrate an App Into Shopify

By Owais Sultan Applications on Shopify are usually third-party products, and depending on the permissions provided to them; they can be installed in three ways. This is a post from HackRead.com Read the original post: How to Integrate an App Into Shopify...

Facebook sues Ukrainian man for scraping and selling 178m users’ data

By Deeba Ahmed Facebook tracked down the programmer after he mistakenly used the same username and contact information on email and job portals. This is a post from HackRead.com Read the original post: Facebook sues Ukrainian man for scraping and selling 178m users data...

Medtronic recalls insulin pump controllers over life-threatening flaws

By Deeba Ahmed Medtronic has recalled the remote controllers used with some of the company’s insulin pumps because of inherent vulnerabilities that could lead to injury or death. This is a post from HackRead.com Read the original post: Medtronic recalls insulin pump controllers over...

Anonymous steals ‘decade’s worth of data’ from far-right web host Epik

By Waqas Anonymous claims the data contains information about Epik domains, clients, and even backend information of the company’s clients to the public. This is a post from HackRead.com Read the original post: Anonymous steals decade’s worth of data from far-right web host Epik...

Security risks to your mobile app and how to avoid them

By Owais Sultan what are the most significant security risks to your mobile app? We’ve explained them below to help you avoid making the same mistakes. This is a post from HackRead.com Read the original post: Security risks to your mobile app and how to avoid them...

Bangkok Airways hit by Lockbit ransomware; leaks 103GB of data

By Waqas The Lockbit ransomware gang also claimed to have ''extra 200 GB'' worth of Bangkok Airways data. This is a post from HackRead.com Read the original post: Bangkok Airways hit by Lockbit ransomware; leaks 103GB of data...

Unpatched Microsoft Exchange servers hit with ProxyShell attack

By Waqas Researchers have identified 140+ webshells launched against 1,900 unpatched Microsoft Exchange servers. This is a post from HackRead.com Read the original post: Unpatched Microsoft Exchange servers hit with ProxyShell attack...

HolesWarm crypto malware hits unpatched Linux, Windows servers

By Waqas Researchers are calling the HolesWarm the "king of vulnerability exploitation" as the malware has already exploited 20 known Linux and Windows vulnerabilities in just a month. This is a post from HackRead.com Read the original post: HolesWarm crypto malware hits unpatched Linux, Windows...

Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera

By Deeba Ahmed The issue was demonstrated at the Pwn2Own 2021 hacking contest in which researchers won $100,000 for exploiting this flaw in Chrome and Edge. This is a post from HackRead.com Read the original post: Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera...

US charges Swiss hacker behind massive Verkada security camera hack

By Habiba Rashid The hacker Till Kottmann aka “deletescape” has been indicted for conspiracy, wire fraud, and aggravated identity theft by the US DOJ. This is a post from HackRead.com Read the original post: US charges Swiss hacker behind massive Verkada security camera hack...

Google reveals unpatched 0day vulnerability in Microsoft’s API

By Sudais Asif Apparently, Microsoft released a patch to fix the vulnerability in June but it did not work the way it was supposed to and reminds unpatched to date. This is a post from HackRead.com Read the original post: Google reveals unpatched 0day vulnerability in Microsofts API...

The new Wondershare PDFelement with added features

By Sudais Asif PDFelement is an all-in-one PDF solution allowing users to edit, convert, and optimise documents securely. Here's how it works. This is a post from HackRead.com Read the original post: The new Wondershare PDFelement with added features...

Malware attack can trick biologists into producing dangerous toxins

By Deeba Ahmed Researchers urge for improving bio-cybersecurity as threat actors can use malware to target Synthetic DNA Orders to modify DNA strings sequence. This is a post from HackRead.com Read the original post: Malware attack can trick biologists into producing dangerous toxins...

US private prison, detention centers operator hit by ransomware attack

By Deeba Ahmed The victim of this ransomware attack is Geo Group that runs over 120 private prisons and illegal immigration detention centers across the globe. This is a post from HackRead.com Read the original post: US private prison, detention centers operator hit by ransomware attack...

Google Firebase cloud messaging abused to spread Android malware

By Waqas Dubbed Firestarter by researchers; the Android malware campaign is exploiting the Kashmir issue between India and Pakistan but its target remains the Pakistani government, noted Cisco Talos researchers. Cisco Talos researchers have discovered that the APT threat group DoNot exploits...

Voting system in Georgia county hit by ransomware attack

By Waqas The ransomware attack impacted the voting precinct map and voter signature database among other services. This is a post from HackRead.com Read the original post: Voting system in Georgia county hit by ransomware attack...

Attacker builds malware variant with leaked Mirai source code

By Sudais Asif The source code of Mirai was leaked in September 2016, on the hacking community Hackforums. This is a post from HackRead.com Read the original post: Attacker builds malware variant with leaked Mirai source code...

Popular shopping site leaks miners’ data in 6TB of database mess up

By Waqas The database belonging to windeln.de's production server was left exposed on a misconfigured server. This is a post from HackRead.com Read the original post: Popular shopping site leaks miners data in 6TB of database mess up...

Flaws expose DVB-T2 set-top boxes to botnet & ransomware attacks

By Sudais Asif Two popular DVD top-set boxes are vulnerable to both botnet and ransomware attacks. This is a post from HackRead.com Read the original post: Flaws expose DVB-T2 set-top boxes to botnet & ransomware attacks...

Freepik and Flaticon suffer data breach; 8.3 million users affected

By Waqas For your information, Flaticon claims to be the largest database of free icons and is owned by Freepik company. This is a post from HackRead.com Read the original post: Freepik and Flaticon suffer data breach; 8.3 million users affected...

VPN firm that claims zero logs policy leaks 20 million user logs

By Sudais Asif The VPN company in the discussion is a Hong Kong-based UFO VPN. This is a post from HackRead.com Read the original post: VPN firm that claims zero logs policy leaks 20 million user logs...

German Police seize DDoSecrets server hosting BlueLeaks data dump

By Waqas The BlueLeaks data dump contained sensitive information on Police, Fusion centers which were recently leaked by WikiLeaks-like service called DDoSecrets. German police have seized a server that hosted the BlueLeaks data dump. As previously reported, BlueLeaks referees to a leaked databas...

Attackers steal payment information through Google Analytics

By Sudais Asif To start with, as most eCommerce websites mark Google Analytics domains as being... This is a post from HackRead.com Read the original post: Attackers steal payment information through Google Analytics...

Hackers selling 267 million Facebook records on hacker forum

By Waqas Currently, the trove of 267 million Facebook records are being sold for around $600 on the hacker forum. This is a post from HackRead.com Read the original post: Hackers selling 267 million Facebook records on hacker forum...

Sensitive data of 80 million US households exposed online

By Uzair Amir The 24 GB database was hosted on a Microsoft cloud server. Another day, another data breach; this time researchers have discovered an unprotected cloud repository containing personal and financial information of more than 80 million US households. This incident reminds us of two...

You are not alone; social media giant Facebook is down

By Carolina You are not alone; the social media giant Facebook is down in many countries around the world for almost a half an hour starting from 6 pm UK time. In some cases, Facebook's site and application both are suffering an outage. The reason for this outage is currently unknown and there ha...

Cathay Pacific hit by massive data breach; 10 million passengers affected

By Waqas Hong Kong's Cathay Pacific Airways Limited has suffered a massive data breach in which personal data of 9.4 million customers has been stolen by unknown hackers. Cathay Pacific states that the stolen data includes passenger name, date of birth, nationality, email, phone number, frequent...

Hackers illegally selling stolen Fortnite accounts & botnets on Instagram

By Waqas It is not happening on Dark Web but Instagram. Instagram has become much more than a platform to share your traveling, culinary, or fitness-related experiences, but a thriving portal for selling stolen accounts. Reportedly, hackers are using Instagram to sell access to botnets as well as...