January 2024 – We Fix PC

Hackers push USB malware payloads via news, media hosting sites

A financially motivated threat actor using USB devices for initial infection has been found abusing legitimate online platforms, including GitHub, Vimeo, and Ars Technica, to host encoded payloads embedded in seemingly benign content. […]

31 Jan

Police seize record 50,000 Bitcoin from now-defunct piracy site

The police in Saxony, eastern Germany, have seized 50,000 Bitcoin from the former operator of the pirate site movie2k.to through a voluntary deposit to a state-controlled wallet. […]

31 Jan

Europcar denies data breach of 50 million users, says data is fake

Car rental company Europcar says it has not suffered a data breach and that shared customer data is fake after a threat actor claimed to be selling the personal info of 50 million customers. […]

31 Jan

Exploit released for Android local elevation flaw impacting 7 OEMs

A proof-of-concept (PoC) exploit for a local privilege elevation flaw impacting at least seven Android original equipment manufacturers (OEMs) is now publicly available on GitHub. However, as the exploit requires local access, its release will mostly be helpful to researchers. […]

31 Jan

CISA warns of patched iPhone kernel bug now exploited in attacks

CISA warned today that a patched kernel security flaw affecting Apple iPhones, Macs, TVs, and watches is now being actively exploited in attacks. […]

30 Jan

New Linux glibc flaw lets attackers get root on major distros

Unprivileged attackers can get root access on multiple major Linux distributions in default configurations by exploiting a newly disclosed local privilege escalation (LPE) vulnerability in the GNU C Library (glibc). […]

30 Jan

Online ransomware decryptor helps recover partially encrypted files

CyberArk has created an online version of ‘White Phoenix,’ an open-source ransomware decryptor targeting operations using intermittent encryption. […]

30 Jan

US charges two more suspects with DraftKing account hacks

The U.S. Department of Justice arrested and charged two more suspects for their involvement in the hacking of almost 68,000 DraftKings accounts in a November 2022 credential stuffing attack. […]

30 Jan

Vastaamo hacker traced via ‘untraceable’ Monero transactions, police says

Julius Aleksanteri Kivimäki, the suspect believed to be behind an attack against one of Finland’s largest psychotherapy clinics, Vastaamo, was allegedly identified by tracing what has been believed to be untraceable Monero transactions. […]

30 Jan

A mishandled GitHub token exposed Mercedes-Benz source code

A mishandled GitHub token gave unrestricted access to Mercedes-Benz’s internal GitHub Enterprise Service, exposing source code to the public. […]

Month: January 2024

Hackers push USB malware payloads via news, media hosting sites

Police seize record 50,000 Bitcoin from now-defunct piracy site

Europcar denies data breach of 50 million users, says data is fake

Exploit released for Android local elevation flaw impacting 7 OEMs

CISA warns of patched iPhone kernel bug now exploited in attacks

New Linux glibc flaw lets attackers get root on major distros

Online ransomware decryptor helps recover partially encrypted files

US charges two more suspects with DraftKing account hacks

Vastaamo hacker traced via ‘untraceable’ Monero transactions, police says

A mishandled GitHub token exposed Mercedes-Benz source code