A South Asian financial institution has been hit by a custom malware toolkit combining a modular backdoor, dubbed BRUSHWORM, and a DLL side‑loaded keylogger known as BRUSHLOGGER.  The attackers relied on a backdoor initially named paint.exe and a keylogger masquerading as libcurl.dll, both of which lacked advanced packing or obfuscation. BRUSHWORM acts as the primary implant, handling […]

The post Hackers Target South Asian Financial Firm with BRUSHWORM and BRUSHLOGGER Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A China-nexus threat actor known as Red Menshen is planting stealthy backdoors deep inside global telecommunications networks. According to a recent investigation by Rapid7 Labs, this long-term espionage campaign utilises a highly evasive Linux kernel malware called BPFdoor.  Instead of launching noisy, disruptive attacks, these hackers are building dormant sleeper cells in the telecom backbone. […]

The post Hackers Implant Stealthy BPFdoor Backdoors in Telecom Networks for Persistent Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.