Kamala Harris

Joe Biden

Dean Phillips

Marianne Williamson

Donald Trump

Vivek Ramaswamy

Nikki Haley

Ron DeSantis

Cornel West

Robert F. Kennedy

2024 United States Presidential Election

The LummaC2 obfuscator employs a novel control flow protection scheme designed specifically for its stealer component, which is part of a broader set of transformations, making it difficult for analysts to reverse engineer the binary.  It introduces obfuscated code that is mixed with the original compiler-generated code, requiring a specialized deobfuscator for analysis. The obfuscator’s […] The post LummaC2 Stealer Leverages Customized Control …

IT Security News - cybersecurity, infosecurity news

GBHackers On Security

LummaC2 Stealer Leverages Customized Control Flow Indirection For Execution

Hackers are increasingly exploiting third-party email infrastructures to send spam emails. This tactic complicates the detection and prevention of spam and threatens the integrity of legitimate email communications. By leveraging vulnerabilities in various online platforms, cybercriminals can masquerade as legitimate users and send unsolicited emails that can bypass traditional spam filters. Exploiting Online Registration and […] The post Hacker…

Hackers Abusing third-party email infrastructure to Send Spam Mails

The original threat actor behind the Octo malware family has released a new variant, Octo2, with enhanced stability for remote action capabilities to facilitate Device Takeover attacks.  This new variant targets European countries and employs sophisticated obfuscation techniques, including the Domain Generation Algorithm (DGA), to evade detection and ensure the Trojan remains undetected. The Exobot malware family, initially a banking trojan, evo…

Android

cybernoz.com

Octo2 Android Malware Attacking To Steal Banking Credentials

Kryptina RaaS, a free and open-source RaaS platform for Linux, initially struggled to attract attention. Still, after a Mallox affiliate’s staging server was leaked in May 2024, Kryptina’s modified version, branded Mallox v1.0, gained prominence.  The research examines the data exposed in the leak, highlighting differences between the original Kryptina RaaS (v2.2) and Mallox v1.0 […] The post New Mallox Ransomware Linux Variant Attacking Enterpr…

Linux

New Mallox Ransomware Linux Variant Attacking Enterprise Linux Servers

North Korean IT workers, disguised as non-North Koreans, infiltrate various industries to generate revenue for their regime, evading sanctions and funding WMD programs by exploiting privileged access to enable cyber intrusions.  Facilitators, often non-North Koreans, assist these workers by laundering money, hosting company laptops, using stolen identities, and accessing international financial systems, which help the […] The post Google Warns O…

Sanctions

Google

San Francisco, California

San Francisco

Google Warns Of North Korean IT Workers Have Infiltrated The U.S. Workforce

The threat actor, formed in 2023, specializes in ransomware attacks targeting Russian government organizations. It encrypts and deletes victim data, exfiltrates sensitive information, and aims to inflict maximum damage on critical assets. The threat actor likely scans IP address ranges in Russia to identify VPN servers and applications accessible from the internet that could serve […] The post TWELVE Threat Attacks Windows To Encrypt Then Deleti…

Russia, Moscow Oblast

Russia

TWELVE Threat Attacks Windows To Encrypt Then Deleting Victims’ Data

The RomCom malware family, particularly its SnipBot variant, has evolved into a sophisticated threat capable of ransomware, extortion, and targeted credential gathering. It employs various attack methods, including PDF-based downloaders and executable payloads, to compromise victim systems.  The threat actors behind RomCom have been active since at least 2022 and utilize stolen or fraudulently obtained […] The post Hackers Weaponizing PDF files …

Hackers Weaponizing PDF files To Deliver New SnipBot Malware

TeamTNT is targeting CentOS VPS clouds with SSH brute force attacks. It has uploaded a malicious script that disables security, deletes logs, and modifies system files to kill existing miners, remove Docker containers, and redirect DNS to Google servers. The script stealthily installs the Diamorphine rootkit to gain root privileges and maintain persistent control by […] The post TeamTNT Hackers Attacking VPS Servers Running CentOS appeared first…

TeamTNT Hackers Attacking VPS Servers Running CentOS

Tech

Cyber Security

Microsoft

Startups

Security

Hacking

Software

US Economy

Windows

Cary, North Carolina, 27th September 2024, CyberNewsWire The post G2 Names INE 2024 Enterprise and Small Business Leader first appeared on Tech Startups.

North Carolina

Next Big Future

Security Boulevard

Startups News | Tech News

DevOps.com

G2 Names INE 2024 Enterprise and Small Business Leader - Tech Startups

Hot on the heels of the National Public Records data breach, which leaked more than 2 billion records, another background check firm has now had a leak. The company in question, MC2 Data, exposed the sensitive data of around one-third of the U.S. population – 106 million people – to the entire internet. 

1841550

United States

Tech Radar

Latest Nigerian News

Malware Analysis, News and Indicators

The Cyber Express

106 million Americans exposed as massive data leak rocks background check firm

Money transfer giant MoneyGram has confirmed it suffered a cyberattack after dealing with system outages and customer complaints about lack of service since Friday. [...]

News from GBHackers On Security