Cybersecurity News - Page 30

Volkov acted as an initial access broker for the Yanluowang ransomware group breaking into company networks and selling access to other hackers.

The has been exploited in the wild to gain SYSTEM-level privileges on affected Windows devices.

he attack exploits subtle metadata patterns in network traffic to deduce a user’s discussion topics.

Attackers abused the unauthenticated access to run the setup process and create a new admin account.

Using stolen Google credentials, the hackers log into victims’ accounts to access Find Hub, where they can query GPS data and issue remote wipe commands.

The attackers delivered the spyware via malicious DNG (Digital Negative) image files, typically sent over WhatsApp.

In brief: Threat actors exploit multiple Cisco flaws, Sandworm launched multiple data-wiping cyberattacks against Ukraine, and more.

Еhe malicious activity was limited to unauthorized access of cloud backup files from a specific cloud environment via an API callю

PROMPTFLUX is written in VBScript and uses a hard-coded API key to query Google’s Gemini model.

The campaign’s TTPs bear strong resemblance to known Iranian cyber espionage groups, including TA455, Charming Kitten, and MuddyWater.