New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads

New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads,

A new piece of malware dubbed dotRunpeX is being used to distribute numerous known malware families such as Agent Tesla, Ave Maria, BitRAT, FormBook, LokiBot, NetWire, Raccoon Stealer, RedLine Stealer, Remcos, Rhadamanthys, and Vidar.
« DotRunpeX is a new injector written in .NET using the Process Hollowing technique and used to infect systems with a variety of known malware families, » Check

,

A new piece of malware dubbed dotRunpeX is being used to distribute numerous known malware families such as Agent Tesla, Ave Maria, BitRAT, FormBook, LokiBot, NetWire, Raccoon Stealer, RedLine Stealer, Remcos, Rhadamanthys, and Vidar.
« DotRunpeX is a new injector written in .NET using the Process Hollowing technique and used to infect systems with a variety of known malware families, » Check

, ,
https://thehackernews.com/2023/03/new-dotrunpex-malware-delivers-multiple.html

Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen

Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen,

A banking trojan dubbed Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads.
The activity, which commenced in August 2022, is currently ongoing, Ocelot Team from Latin American cybersecurity firm Metabase Q said in a report shared with The Hacker News.
Mispadu (

,

A banking trojan dubbed Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads.
The activity, which commenced in August 2022, is currently ongoing, Ocelot Team from Latin American cybersecurity firm Metabase Q said in a report shared with The Hacker News.
Mispadu (

, ,
https://thehackernews.com/2023/03/mispadu-banking-trojan-targets-latin.html

Crypto : pourquoi ChatGPT est une arme contre les hackers

Crypto : pourquoi ChatGPT est une arme contre les hackers,

chatgpt crypto hackers

Le monde des cryptomonnaies n’échappe pas à la révolution ChatGPT. D’après certains tests, le modèle linguistique d’OpenAI est capable d’améliorer la sécurité de la blockchain… et de mettre des bâtons dans les roues des hackers.

,

chatgpt crypto hackers

Le monde des cryptomonnaies n’échappe pas à la révolution ChatGPT. D’après certains tests, le modèle linguistique d’OpenAI est capable d’améliorer la sécurité de la blockchain… et de mettre des bâtons dans les roues des hackers.

, ,
https://www.01net.com/actualites/crypto-chatgpt-arme-hackers.html

New Cyber Platform Lab 1 Decodes Dark Web Data to Uncover Hidden Supply Chain Breaches

New Cyber Platform Lab 1 Decodes Dark Web Data to Uncover Hidden Supply Chain Breaches,

This article has not been generated by ChatGPT. 
2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 2022 compared to 2021. More organisations chose not to pay ransom demands, according to findings by blockchain firm Chainalysis.
Nonetheless, stolen data has value beyond a price tag, and in

,

This article has not been generated by ChatGPT. 
2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 2022 compared to 2021. More organisations chose not to pay ransom demands, according to findings by blockchain firm Chainalysis.
Nonetheless, stolen data has value beyond a price tag, and in

, ,
https://thehackernews.com/2023/03/new-cyber-platform-lab-1-decodes-dark.html

Researchers Shed Light on CatB Ransomware’s Evasion Techniques

Researchers Shed Light on CatB Ransomware’s Evasion Techniques

,

The threat actors behind the CatB ransomware operation have been observed using a technique called DLL search order hijacking to evade detection and launch the payload.
CatB, also referred to as CatB99 and Baxtoy, emerged late last year and is said to be an « evolution or direct rebrand » of another ransomware strain known as Pandora based on code-level similarities.
It’s worth noting that the use

,

The threat actors behind the CatB ransomware operation have been observed using a technique called DLL search order hijacking to evade detection and launch the payload.
CatB, also referred to as CatB99 and Baxtoy, emerged late last year and is said to be an « evolution or direct rebrand » of another ransomware strain known as Pandora based on code-level similarities.
It’s worth noting that the use

, ,
https://thehackernews.com/2023/03/researchers-shed-light-on-catb.html

Emotet Rises Again: Evades Macro Security via OneNote Attachments

Emotet Rises Again: Evades Macro Security via OneNote Attachments,

The notorious Emotet malware, in its return after a short hiatus, is now being distributed via Microsoft OneNote email attachments in an attempt to bypass macro-based security restrictions and compromise systems.
Emotet, linked to a threat actor tracked as Gold Crestwood, Mummy Spider, or TA542, continues to be a potent and resilient threat despite attempts by law enforcement to take it down.
A 

,

The notorious Emotet malware, in its return after a short hiatus, is now being distributed via Microsoft OneNote email attachments in an attempt to bypass macro-based security restrictions and compromise systems.
Emotet, linked to a threat actor tracked as Gold Crestwood, Mummy Spider, or TA542, continues to be a potent and resilient threat despite attempts by law enforcement to take it down.
A 

, ,
https://thehackernews.com/2023/03/emotet-rises-again-evades-macro.html

« Acropalypse », le nouveau cauchemar des utilisateurs de Google Pixel

« Acropalypse », le nouveau cauchemar des utilisateurs de Google Pixel,

Google Pixel 7

Une vulnérabilité a été découverte dans la fonctionnalité de capture d’écran des smartphones Pixel. Une faille de sécurité qui présente un risque important pour les utilisateurs des téléphones de Google.

,

Google Pixel 7

Une vulnérabilité a été découverte dans la fonctionnalité de capture d’écran des smartphones Pixel. Une faille de sécurité qui présente un risque important pour les utilisateurs des téléphones de Google.

, ,
https://www.01net.com/actualites/acropalypse-le-nouveau-cauchemar-des-utilisateurs-de-google-pixel.html

Chinese Hackers Exploit Fortinet Zero-Day Flaw for Cyber Espionage Attack

Chinese Hackers Exploit Fortinet Zero-Day Flaw for Cyber Espionage Attack,

The zero-day exploitation of a now-patched medium-severity security flaw in the Fortinet FortiOS operating system has been linked to a suspected Chinese hacking group.
Threat intelligence firm Mandiant, which made the attribution, said the activity cluster is part of a broader campaign designed to deploy backdoors onto Fortinet and VMware solutions and maintain persistent access to victim

,

The zero-day exploitation of a now-patched medium-severity security flaw in the Fortinet FortiOS operating system has been linked to a suspected Chinese hacking group.
Threat intelligence firm Mandiant, which made the attribution, said the activity cluster is part of a broader campaign designed to deploy backdoors onto Fortinet and VMware solutions and maintain persistent access to victim

, ,
https://thehackernews.com/2023/03/chinese-hackers-exploit-fortinet-zero.html

Pompompurin Unmasked: Infamous BreachForums Mastermind Arrested in New York

Pompompurin Unmasked: Infamous BreachForums Mastermind Arrested in New York,

U.S. law enforcement authorities have arrested a New York man in connection with running the infamous BreachForums hacking forum under the online alias « Pompompurin. »
The development, first reported by Bloomberg Law, comes after News 12 Westchester, earlier this week, said that federal investigators « spent hours inside and outside of a home in Peekskill. »
« At one point, investigators were seen

,

U.S. law enforcement authorities have arrested a New York man in connection with running the infamous BreachForums hacking forum under the online alias « Pompompurin. »
The development, first reported by Bloomberg Law, comes after News 12 Westchester, earlier this week, said that federal investigators « spent hours inside and outside of a home in Peekskill. »
« At one point, investigators were seen

, ,
https://thehackernews.com/2023/03/pompompurin-unmasked-infamous.html

LockBit 3.0 Ransomware: Inside the Cyberthreat That’s Costing Millions

LockBit 3.0 Ransomware: Inside the Cyberthreat That’s Costing Millions

,

U.S. government agencies have released a joint cybersecurity advisory detailing the indicators of compromise (IoCs) and tactics, techniques, and procedures (TTPs) associated with the notorious LockBit 3.0 ransomware.
« The LockBit 3.0 ransomware operations function as a Ransomware-as-a-Service (RaaS) model and is a continuation of previous versions of the ransomware, LockBit 2.0, and LockBit, »

,

U.S. government agencies have released a joint cybersecurity advisory detailing the indicators of compromise (IoCs) and tactics, techniques, and procedures (TTPs) associated with the notorious LockBit 3.0 ransomware.
« The LockBit 3.0 ransomware operations function as a Ransomware-as-a-Service (RaaS) model and is a continuation of previous versions of the ransomware, LockBit 2.0, and LockBit, »

, ,
https://thehackernews.com/2023/03/lockbit-30-ransomware-inside.html