16 Aug Massive 400,000 proxy botnet built with stealthy malware infections A new campaign involving the delivery of proxy server apps to Windows systems has been uncovered, where users are reportedly involuntarily acting as residential exit nodes controlled by a private company. […]
16 Aug Major U.S. energy org targeted in QR code phishing attack A phishing campaign was observed predominantly targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security. […]
15 Aug Ivanti Avalanche impacted by critical pre-auth stack buffer overflows Two stack-based buffer overflows collectively tracked as CVE-2023-32560 impact Ivanti Avalanche, an enterprise mobility management (EMM) solution designed to manage, monitor, and secure a wide range of mobile devices. […]
15 Aug LinkedIn accounts hacked in widespread hijacking campaign LinkedIn is being targeted in a wave of account hacks resulting in many accounts being locked out for security reasons or ultimately hijacked by attackers. […]
15 Aug Almost 2,000 Citrix NetScaler servers backdoored in hacking campaign A threat actor has compromised close to 2,000 thousand Citrix NetScaler servers in a massive campaign exploiting the critical-severity remote code execution tracked as CVE-2023-3519. […]
15 Aug Raccoon Stealer malware returns with new stealthier version The developers of Raccoon Stealer information-stealing malware have ended their 6-month hiatus from hacker forums to promote a new 2.3.0 version of the malware to cyber criminals. […]
15 Aug New CVE-2023-3519 scanner detects hacked Citrix ADC, Gateway devices Mandiant has released a scanner to check if a Citrix NetScaler Application Delivery Controller (ADC) or NetScaler Gateway Appliance was compromised in widespread attacks exploiting the CVE-2023-3519 vulnerability. […]
14 Aug Threat actors use beta apps to bypass mobile app store security The FBI is warning of a new tactic used by cybercriminals where they promote malicious “beta” versions of cryptocurrency investment apps on popular mobile app stores that are then used to steal crypto. […]
14 Aug Discord.io confirms breach after hacker steals data of 760K users The Discord.io custom invite service has temporarily shut down after suffering a data breach exposing the information of 760,000 members. […]
14 Aug Over 100K hacking forums accounts exposed by info-stealing malware Researchers discovered 120,000 infected systems that contained credentials for cybercrime forums. Many of the computers belong to hackers, the researchers say. […]