Security researchers have identified a sophisticated technique that allows attackers to hide malicious processes from Windows Task Manager and system monitoring tools, even on systems with Microsoft’s most advanced kernel protections enabled. The bypass leverages legitimate Windows APIs to manipulate core data structures before integrity checks can detect tampering, circumventing both PatchGuard and Hypervisor-Protected Code […]

The post How Attackers Hide Processes by Abusing Kernel Patch Protection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated credential-harvesting operation conducted by BlueDelta, a Russian state-sponsored threat group linked to the GRU’s Main Directorate, targeted critical infrastructure organizations and research institutions throughout 2025, according to a comprehensive investigation by Recorded Future’s Insikt Group. The campaign, spanning February through September 2025, represents a significant evolution in the group’s persistent credential-theft operations, with […]

The post BlueDelta Hackers Target Microsoft OWA, Google, and Sophos VPN to Steal Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers at Zscaler ThreatLabz have uncovered three malicious npm packages designed to install a sophisticated remote access trojan (RAT) targeting JavaScript developers. The packages, named bitcoin-main-lib, bitcoin-lib-js, and bip40, collectively registered over 3,400 downloads before being removed from the npm registry in November 2025. The attack exploits developer trust in the legitimate BitcoinJS project […]

The post Three Malicious NPM Packages Target Developers’ Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.