Russian state-sponsored and aligned threat groups are increasingly combining Remote Desktop Protocol (RDP), Virtual Private Networks (VPNs), supply chain compromise, and sophisticated social engineering to gain initial access to targeted networks across government, critical infrastructure, and commercial sectors. This multi-vector approach allows them to bypass perimeter defenses, blend in with legitimate traffic, and maintain long-term […]

The post Russian Hackers Exploit RDP, VPNs, Supply Chains for Initial Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers compromised the popular art-template npm package to inject a stealthy backdoor that redirected users’ browsers to a malicious watering‑hole site delivering a Coruna‑class iOS exploit framework. The campaign turned a widely used JavaScript templating library into a delivery vehicle for advanced Safari exploits targeting iPhones running iOS 11 through 17.2. The art-template package is […]

The post Popular npm Package “art-template” Backdoored in Watering-Hole Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are actively exploiting FreePBX systems using a highly resilient six-layer persistence mechanism. The campaign has been attributed with high confidence to the threat actor INJ3CTOR3, known for targeting VoIP infrastructure for financial gain since 2019. The operation deploys a multi-stage Bash dropper that installs a previously undocumented PHP webshell family named JOMANGY, alongside the […]

The post Hackers Use Six-Layer Persistence on FreePBX Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are actively using Brazil’s electronic invoice system (NF-e) as a lure to distribute a sophisticated banking trojan known as Banana RAT. The campaign has been attributed to a financially motivated threat cluster tracked as SHADOW-WATER-063 and appears exclusively focused on Brazilian financial institutions. The investigation is notable because analysts obtained visibility into both attacker […]

The post Hackers Weaponize NF-e Invoice Lures to Deploy Banana RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.