Hackers compromised the popular art-template npm package to inject a stealthy backdoor that redirected users’ browsers to a malicious watering‑hole site delivering a Coruna‑class iOS exploit framework. The campaign turned a widely used JavaScript templating library into a delivery vehicle for advanced Safari exploits targeting iPhones running iOS 11 through 17.2. The art-template package is […]

The post Popular npm Package “art-template” Backdoored in Watering-Hole Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are actively exploiting FreePBX systems using a highly resilient six-layer persistence mechanism. The campaign has been attributed with high confidence to the threat actor INJ3CTOR3, known for targeting VoIP infrastructure for financial gain since 2019. The operation deploys a multi-stage Bash dropper that installs a previously undocumented PHP webshell family named JOMANGY, alongside the […]

The post Hackers Use Six-Layer Persistence on FreePBX Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Hackers are actively using Brazil’s electronic invoice system (NF-e) as a lure to distribute a sophisticated banking trojan known as Banana RAT. The campaign has been attributed to a financially motivated threat cluster tracked as SHADOW-WATER-063 and appears exclusively focused on Brazilian financial institutions. The investigation is notable because analysts obtained visibility into both attacker […]

The post Hackers Weaponize NF-e Invoice Lures to Deploy Banana RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A recent phishing campaign dubbed “Operation Dragon Whistle” highlights an evolving trend in cyberattacks: threat actors abusing legitimate developer tools and cloud services to maintain stealth and persistence. Although initially linked to targeting academic environments such as Changzhou University, new analysis reveals overlapping tactics used in a broader campaign aimed at government-linked organizations, including Pakistan’s […]

The post Operation Dragon Whistle Targets Changzhou University with Malicious LNK Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.