Russian Government Software Backdoored to Deploy Konni RAT Malware

A backdoor has been included in an installer for a utility that is probably used by the Ministry of Foreign Affairs (MID)’s Russian Consular Department to distribute the remote access trojan Konni RAT (also known as UpDog). The investigation was conducted by German cybersecurity firm DCSO, which concluded that actors with ties to the Democratic […]

Russian Government Software Backdoored to Deploy Konni RAT Malware Read More »

Apple Issues Patch for Critical Zero-Day in iPhones, Macs – Update Now

In response to a zero-day vulnerability that is being actively exploited in the wild, Apple provided security upgrades on Monday for the Safari web browser, iOS, iPadOS, macOS, tvOS, and Linux. A threat actor could use the problem, identified as CVE-2024-23222, which is a type confusion bug in the WebKit browser engine, to execute arbitrary

Apple Issues Patch for Critical Zero-Day in iPhones, Macs – Update Now Read More »

BreachForums Founder Will Not Be Going To Jail

Conor Brian Fitzpatrick, who founded and oversaw BreachForums, received a sentence of time served and 20 years of supervised release. Fitzpatrick, also known online as “pompompurin,” was detained in New York in March 2023 and charged with possessing child pornography and conspiring to commit access device fraud. After posting a $300,000 bond and entering a

BreachForums Founder Will Not Be Going To Jail Read More »

Syrian Hackers are Giving Cybercriminals Access to a Covert C#-based Silver RAT.

A remote access trojan (RAT) known as Silver RAT, developed by threat actors going by the moniker Anonymous Arabic, can run concealed apps covertly and evade security measures. Cybersecurity company Cyfirma stated in a research released last week that “the developers operate on multiple hacker forums and social media platforms, showcasing an active and sophisticated

Syrian Hackers are Giving Cybercriminals Access to a Covert C#-based Silver RAT. Read More »

29-Year-Old Ukrainian Cryptojacking Kingpin Taken into Arrest for Abusing Cloud Services

As part of a “sophisticated cryptojacking scheme,” a 29-year-old Ukrainian national has been detained; the operation brought in over $2 million (€1.8 million) in illegal revenues. With assistance from Europol and an unidentified cloud service provider, the National Police of Ukraine captured the individual dubbed the “mastermind” of the operation on January 9 in Mykolaiv,

29-Year-Old Ukrainian Cryptojacking Kingpin Taken into Arrest for Abusing Cloud Services Read More »

Behind the Scenes of Matveev’s Ransomware Empire: Tactics and Team

The inner workings of the ransomware operation headed by Russian national Mikhail Pavlovich Matveev, who was charged by the US government earlier this year for his claimed involvement in thousands of attacks worldwide, have been revealed by cybersecurity researchers. According to reports, Matveev—who goes by the identities Wazawaka, m1x, Boriselcin, Uhodiransomwar, Orange, and waza—lives in

Behind the Scenes of Matveev’s Ransomware Empire: Tactics and Team Read More »

3,500 Arrested in Global Operation HAECHI-IV Targeting Financial Criminals

Over the course of a six-month worldwide police investigation known as HAECHI-IV, approximately 3,500 people have been arrested and $300 million worth of assets have been seized from 34 different nations. Targeting a variety of financial crimes, including voice phishing, romance scams, online extortion, investment fraud, money laundering connected to illicit online gambling, business email

3,500 Arrested in Global Operation HAECHI-IV Targeting Financial Criminals Read More »

Kali Linux 2023.4 Released With New Hacking Tools

As 2023 comes to an end and the holidays approach, Offensive Security publishes Kali Linux 2023.4, the most recent version of the well-liked operating system. Offensive Security’s Kali Linux, an operating system based on Debian, is devoted to penetration testing and ethical hacking. In this field, it’s a cutting-edge, open-source, free operating system. Every year,

Kali Linux 2023.4 Released With New Hacking Tools Read More »

Hackers Can Create A C2 Channel Using Google Calendar

Google is alerting users to the existence of several threat actors that are disseminating a proof-of-concept (PoC) attack that uses its Calendar service to host command-and-control devices. Using a Gmail account, the application, known as Google Calendar RAT (GCR), uses Google Calendar Events for C2. It was initially released in June 2023 on GitHub. Developer

Hackers Can Create A C2 Channel Using Google Calendar Read More »