Skip to content

ADMIN.FOUNDATION

  • GraphWorm Malware Abuses Microsoft OneDrive for Stealthy C2 Operations

    ·

    cyber security, Cyber Security News, Malware

    A new activity from Webworm, a China-aligned advanced persistent threat (APT) group, revealing a significant evolution in its cyber espionage toolkit during 2025. The group, first publicly documented in 2022, has shifted its targeting from primarily Asian organizations to government entities across Europe, while adopting stealthier techniques and cloud-based command-and-control (C2) infrastructure. One of the […]

    The post GraphWorm Malware Abuses Microsoft OneDrive for Stealthy C2 Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fox Tempest Linked to Malware-Signing Service Abusing Microsoft Artifact Signing

    ·

    cyber security, Cyber Security News, Malware, Microsoft, vulnerability

    Fox Tempest, a financially motivated threat actor, has been linked to a large-scale malware-signing-as-a-service (MSaaS) operation that abused Microsoft’s Artefact Signing platform to enable cybercriminals to distribute malicious software that appeared to be trusted. According to Microsoft Threat Intelligence, the group enabled ransomware campaigns and malware distribution by generating fraudulent but valid code-signing certificates, allowing […]

    The post Fox Tempest Linked to Malware-Signing Service Abusing Microsoft Artifact Signing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake Word Phishing Reveals Enterprise Blind Spot in Trusted Remote Access Tools

    ·

    ANY.RUN, cybersecurity, Malware, Microsoft Word, Phishing, Phishing Scam, Security, SOC, Threat Intelligence
    Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Fake Tax Assessment Pages Spread Windows Malware

    ·

    cyber security, Cyber Security News, Malware

    Hackers are actively targeting Windows users with fake Indian Income Tax assessment pages in a campaign tracked as TAX#TRIDENT. The campaign begins with fraudulent tax assessment or penalty pages designed to create urgency. Victims are prompted to download what appears to be an official document, often packaged as a ZIP archive. Once opened, the archive […]

    The post Fake Tax Assessment Pages Spread Windows Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Typosquatting Is No Longer a User Problem. It’s a Supply Chain Problem

    ·

    AI-generated lookalike domains are now embedded inside the third-party scripts running on your web properties. Here’s why your current stack can’t see them, and what detection actually requires. Download the CISO Expert Guide to Typosquatting in the AI Era → TL;DR  Typosquatting is no longer a user problem. Attackers now embed lookalike domains inside legitimate third-party scripts.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Banana RAT Malware in Fake Invoices Hits Customers at 16 Brazilian Banks

    ·

    Banana RAT, Brazil, Cyber Crime, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security
    Banana RAT malware hidden in fake invoices and security update screens targets customers at 16 Brazilian banks stealing data with QR fraud.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Pardus Linux Vulnerability Lets Local Attackers Gain Silent Root Access

    ·

    CVE/vulnerability, cyber security, Cyber Security News, Linux, vulnerability

    A critical privilege escalation vulnerability chain, tracked as CVE-2026-5140, has been discovered in the Pardus Linux update mechanism, allowing local users to gain full root access without authentication. The issue, rated CVSS 9.3 (Critical), affects the pardus-update package and stems from a combination of three distinct flaws that, when chained together, enable complete system compromise within seconds. Pardus Linux […]

    The post Pardus Linux Vulnerability Lets Local Attackers Gain Silent Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

    ·

    Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week. The zero-day flaw, now tracked as CVE-2026-45585, carries a CVSS score of 6.8. It has been described as a BitLocker security feature bypass. “Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as ‘YellowKey,'” the

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Void Botnet Leverages Ethereum for Resilient C2

    ·

    Botnet, cyber security, Cyber Security News

    A newly identified botnet, named Void, is leveraging Ethereum smart contracts to build a resilient, hard-to-disrupt command-and-control (C2) infrastructure, marking a continued evolution in blockchain-enabled cybercrime. Discovered in March 2026 and advertised on a Russian-language cybercrime forum, Void Botnet follows closely behind the earlier Aeternum C2 campaign documented by Qrator Labs, but introduces notable differences […]

    The post Void Botnet Leverages Ethereum for Resilient C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New NGINX Vulnerability Exposes Servers to Malicious Code Execution

    ·

    CVE/vulnerability, cyber security, Cyber Security News, vulnerability

    NGINX has disclosed a new high‑severity vulnerability in its JavaScript module that can allow remote attackers to crash servers and, in specific conditions, execute arbitrary code on vulnerable systems. F5 has published a security advisory (K000161307) describing a flaw in the NGINX JavaScript (njs) module, specifically when the js_fetch_proxy directive is used together with client‑controlled NGINX variables […]

    The post New NGINX Vulnerability Exposes Servers to Malicious Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

Previous Page
1 … 450 451 452 453 454 … 1,250
Next Page

ADMIN.FOUNDATION

cybersecurity / defense / intelligence