Rene Robichaud

@neroqc.bsky.social

2 months ago

US charges 31 more suspects linked to ATM malware attacks A Nebraska federal grand jury charged 31 additional defendants for their involvement in an ATM jackpotting operation allegedly orchestrated by members of the Venezuelan gang Tren de Aragua.

US charges 31 more suspects linked to ATM malware attacks
www.bleepingcomputer.com/news/securit...

#Infosec #Security #Cybersecurity #CeptBiro #US #ATM #MalwareAttacks

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

6 months ago

Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer Detour Dog used DNS TXT records and botnets to distribute Strela Stealer via StarFish backdoor.

Detour Dog just flipped the script!

The group once known for shady redirects is now pushing Strela Stealer via hacked WordPress sites + DNS TXT records.

90% of sites look normal—until they quietly fetch malware. #MalwareAttacks #CyberSecurity thehackernews.com/2025/10/deto...

CyberTaters

@potato.software

6 months ago

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks reconbee.com/china-linked...

#china #chinese #PlugXmalware #Bookwormmalware #malwareattacks #AsianTelecom #ASEANnetworks #potatoattack

ReconBee

@reconbee.bsky.social

6 months ago

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks Cycldek that speaks Chinese read more about China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks reconbee.com/china-linked...

#china #chinese #PlugXmalware #Bookwormmalware #malwareattacks #AsianTelecom #ASEANnetworks #cyberattack

ReconBee

@reconbee.bsky.social

6 months ago

HiddenGh0st Winos and kkRAT Exploit SEO GitHub Pages in Chinese Malware Attacks which is also known as SwimSnake read more about HiddenGh0st Winos and kkRAT Exploit SEO GitHub Pages in Chinese Malware Attacks

HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks reconbee.com/hiddengh0st-...

#HiddenGh0st #winos #KKRAT #SEO #GitHuB #chinese #chinesemalwareattacks #malwareattacks

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

6 months ago

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack 20 npm packages with 2B weekly downloads compromised after maintainer phishing led to crypto-stealing malware.

🚨 20 npm packages with 2 BILLION+ weekly downloads (incl. chalk & debug) were hacked.

A maintainer was phished into giving up 2FA — attackers slipped in malware that hijacks wallets & steals crypto. #CyberSecurity #MalwareAttacks thehackernews.com/2025/09/20-p...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

8 months ago

New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials Coyote malware uses Windows UI Automation to target 75 banks and crypto sites in Brazil, risking credential theft.

ICYMI — A new variant of Coyote malware is now abusing Windows accessibility features to steal banking and crypto credentials.

It scans browser windows with UI Automation, targeting 75+ financial institutions—even offline. #MalwareAttacks #CyberSecurity thehackernews.com/2025/07/new-...

CySecurity News

@cysecuritynews.bsky.social

9 months ago

North Korean Hackers Target Fintech and Gaming Firms with Fake Zoom Apps  A newly uncovered cyber campaign is targeting organizations across North America, Europe, and the Asia-Pacific by exploiting fake Zoom applications. Cybersecurity experts have traced the operation to BlueNoroff, a notorious North Korean state-backed hacking group affiliated with the Lazarus Group. The campaign’s primary focus is on the gaming, entertainment, and fintech sectors, aiming to infiltrate systems and steal cryptocurrency and other sensitive financial data.  Attack strategy  The attack begins with a seemingly innocuous AppleScript disguised as a routine maintenance operation for Zoom’s software development kit (SDK). However, hidden within the script—buried beneath roughly 10,000 blank lines—are malicious commands that quietly download malware from a counterfeit domain, zoom-tech[.]us.  Once the malware is downloaded, it integrates itself into the system through LaunchDaemon, granting it persistent and privileged access at every system startup. This allows the malware to operate covertly without raising immediate alarms. The malicious software doesn’t stop there. It fetches additional payloads from compromised infrastructure, presenting them as legitimate macOS components like “icloud_helper” and “Wi-Fi Updater.”  These files are designed with anti-forensics techniques to erase temporary files and conceal their activity, all while maintaining a hidden backdoor for remote control and data exfiltration. This deceptive approach is particularly dangerous in remote work environments, where minor software issues are often resolved without deep inspection—making it easier for such malware to slip past unnoticed.  Motives behind the attack BlueNoroff’s intent appears financially driven. The malware specifically searches for cryptocurrency wallet extensions, browser-stored login credentials, and authentication keys. In one known incident dated May 28, a Canadian online gambling platform fell victim to this scheme after its systems were compromised via a fraudulent Zoom troubleshooting script.  Protection Measures for Organizations Given the growing sophistication of such campaigns, security experts recommend several protective steps:  • Independently verify Zoom participants to ensure authenticity.  • Block suspicious domains like zoom-tech[.]us at the firewall level.  • Deploy comprehensive endpoint protection that can detect hidden scripts and unauthorized daemons.  • Invest in reliable antivirus and ransomware protection, especially for firms with cryptocurrency exposure.  • Use identity theft monitoring services to detect compromised credentials early.  • Train employees to recognize and respond to social engineering attempts.  • Secure digital assets with hardware wallets instead of relying on software-based solutions alone.

North Korean Hackers Target Fintech and Gaming Firms with Fake Zoom Apps #cyberattackstrendingnews #malware #Malwareattacks

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

10 months ago

These fake AI video generators steal passwords​ | Cybernews Cybercriminals are using fake AI video tools like Kling AI and Luma AI to spread malware, steal data, and exploit millions across Facebook and LinkedIn

Cybercriminals have entered the AI gold rush to spread malware. Fake AI video generators are tempting users and stealing their data.

#cybercrime #cybersecurity #AI #MalwareAttacks cybernews.com/security/ai-...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

10 months ago

Fake Zenmap. WinMRT sites target IT staff with Bumblebee malware The Bumblebee malware SEO poisoning campaign uncovered earlier this week aimpersonating RVTools is using more typosquatting domainsi mimicking other popular open-source projects to infect devices used...

#Bumblebee malware SEO poisoning campaign uncovered earlier this week aimpersonating RVTools is using more typosquatting domainsi mimicking other popular open-source projects to infect devices used by IT staff. #MalwareAttacks #CyberSecurity www.bleepingcomputer.com/news/securit...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

11 months ago

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data Golden Chickens launch TerraStealerV2 and TerraLogger; both still developing but actively steal data via OCX payloads.

New malware drop from Golden Chickens: TerraStealerV2 steals browser logins, crypto wallets, and extensions, while TerraLogger silently records keystrokes.

📦 Spread via EXE, MSI, LNK, OCX
📤 Sends data to Telegram + shady domain
#cybersecurity #MalwareAttacks
thehackernews.com/2025/05/gold...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

11 months ago

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool Custom malware hidden in UyghurEdit++ targeted WUC leaders since May 2024, exposing Uyghur diaspora surveillance links to China.

New #CyberAttackAlert!

Senior members of the World Uyghur Congress were targeted by malware hidden in a fake UyghurEdit++ app, Citizen Lab reports (Mar 2025).

— Custom-made spyware
— Links to China
— Started as early as May 2024
#MalwareAttacks thehackernews.com/2025/04/malw...

Macro Pulse

@macropulse.bsky.social

11 months ago

#LotusPanda #MalwareAttacks #SoutheastAsia #Hacking #ThreatsAndVulnerabilities
https://dailynewser.netlify.app

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

11 months ago

Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool UNC5174 uses SNOWLIGHT and VShell to target Linux and macOS systems, exploiting Ivanti flaws for remote control.

🔍 Targets: 20+ nations | Sectors: Gov, finance, defense
🛠 Tactics: Open-source tools, fileless payloads, fake authenticator apps
👀 Risk: Remote control, in-memory attacks, hard-to-trace
#MalwareAttacks #CyberSecurity
thehackernews.com/2025/04/chin...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations FamousSparrow deployed two enhanced SparrowDoor variants and ShadowPad in July 2024 attacks, signaling active tool development.

New Chinese cyber attack spotted.

FamousSparrow breached a U.S. trade group + Mexican institute using new, modular malware: SparrowDoor + ShadowPad (first use).
#MalwareAttacks #CyberAlerts thehackernews.com/2025/03/new-...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps FakeApp campaign leverages .NET MAUI to steal data from Indian, Chinese users via bogus banking and social apps

Malware Alert! Hackers are using Microsoft’s .NET MAUI to build fake banking & social apps targeting Indian and Chinese users.

🎯 Targets include banks, X (Twitter), and photo apps. 🧠 Malware hides in app buttons
#MalwareAttacks
thehackernews.com/2025/03/hack...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

Have I Been Pwned adds 284M accounts stolen by infostealer malware ​The Have I Been Pwned data breach notification service has added over 284 million accounts stolen by information stealer malware and found on a Telegram channel.

Have I Been Pwned data breach notification service has added over 284 million accounts stolen by information stealer malware and found on a Telegram channel. #MalwareAttacks #CyberCrime www.bleepingcomputer.com/news/securit...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

5 Active Malware Campaigns in Q1 2025 NetSupport RAT spread via fake CAPTCHAs, Lynx stole 170GB, and AsyncRAT used Python payloads in Q1 2025.

🛑 Cybercriminals are using the ClickFix technique to spread the NetSupport RAT in 2025. Embedded in fake CAPTCHA pages, this RAT grants attackers full control, stealing sensitive data and spying in real-time.
#CyberCrime #MalwareAttacks
thehackernews.com/2025/02/5-ac...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

Belarus-Linked Ghostwriter Uses Macropack-Obfuscated Excel Macros to Deploy Malware Ghostwriter deploys malware-laced Excel files, steganography, and obfuscated macros to target Ukraine and Belarus.

A new malware campaign targets Belarusian activists and the Ukrainian military, using Excel files to deliver PicassoLoader.

The malicious Excel file tricks users into enabling obfuscated macros, which deploy a stealthy RAT and additional payloads. #UkraineRussiaWar #MalwareAttacks

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT A large-scale malware campaign exploited a vulnerable Windows driver to bypass security and deploy HiddenGh0st RAT.

🚨 Cyberattackers are using a vulnerable Windows driver to evade detection and deliver the #Gh0stRAT malware.

Thousands of modified driver variants, including RogueKiller’s truesight.sys, are now actively bypassing defenses. #MalwareAttacks #CyberAttacks thehackernews.com/2025/02/2500...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

SpyLend Android malware downloaded 100,000 times from Google Play An Android malware app called SpyLend has been downloaded over 100,000 times from Google Play, where it masqueraded as a financial tool but became a predatory loan app for those in India.

An Android malware app called SpyLend has been downloaded over 100,000 times from #GooglePlay, where it masqueraded as a financial tool but became a predatory loan app for those in India. #MalwareAttacks #SpyLend #CyberSecurity #Android www.bleepingcomputer.com/news/securit...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

Cracked Garry’s Mod, BeamNG.drive games infect gamers with miners A large-scale malware campaign dubbed "StaryDobry" has been targeting gamers worldwide with trojanized versions of cracked games such as Garry's Mod, BeamNG.drive, and Dyson Sphere Program.

A large-scale malware campaign dubbed "StaryDobry" has been targeting gamers worldwide with trojanized versions of cracked games such as Garry's Mod, BeamNG.drive, and Dyson Sphere Program. #MalwareAttacks #Trojan #Gamers
www.bleepingcomputer.com/news/securit...

YourAnonRiots 🐈️🏴🇵🇸🇲🇲🦋

@youranonriots.bsky.social

1 year ago

Microsoft spots XCSSET macOS malware variant used for crypto theft A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app.

A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app. #MalwareAttacks #cybersecurity www.bleepingcomputer.com/news/securit...

Winbuzzer

@winbuzzer.com

1 year ago

ASP.NET Core | Open-source web framework for .NET Build web apps and services that run on Windows, Linux, and macOS using C#, HTML, CSS, and JavaScript. Get started for free on Windows, Linux, or macOS.

Microsoft: Thousands of Leaked ASP.NET Keys Are Threatening Web Servers Through Code Injection Attacks #Cybersecurity #MicrosoftSecurity #Microsft #ASPdotNET #IIS #ViewState #MalwareAttacks #RemoteCodeExecution #Infosec #CyberThreats #MicrosoftThreatIntelligence

https://buff.ly/4jLJSiJ

Rene Robichaud

@neroqc.bsky.social

1 year ago

Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched.

Fortinet VPN Zero-Day Exploited in Malware Attacks Remains Unpatched: Report
www.securityweek.com/fortinet-vpn...
#Infosec #Security #Cybersecurity #CeptBiro #Fortinet #VPN #ZeroDay #MalwareAttacks

Rene Robichaud

@neroqc.bsky.social

1 year ago

Government Sector Suffers 236% Surge in Malware Attacks Malware-related attacks against global government organizations increased 236% year-on-year in Q1 2024, according to SonicWall

Government Sector Suffers 236% Surge in Malware Attacks
www.infosecurity-magazine.com/news/governm...
#Infosec #Security #Cybersecurity #CeptBiro #GovernmentSector #MalwareAttacks

Rene Robichaud

@neroqc.bsky.social

1 year ago

Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users Binance warns of a global clipper malware targeting cryptocurrency users, replacing wallet addresses to steal funds.

Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users
thehackernews.com/2024/09/bina...
#Infosec #Security #Cybersecurity #CeptBiro #Binance #Clipper #MalwareAttacks #CryptocurrencyUsers

Rene Robichaud

@neroqc.bsky.social

1 year ago

Hamster Kombat’s 250 million players targeted in malware attacks Threat actors are taking advantage of the massive popularity of the Hamster Kombat game, targeting players with fake Android and Windows software that install spyware and information-stealing malware.

Hamster Kombat’s 250 million players targeted in malware attacks
www.bleepingcomputer.com/news/securit...
#Infosec #Security #Cybersecurity #CeptBiro #HamsterKombat #MalwareAttacks

Rene Robichaud

@neroqc.bsky.social

1 year ago

唉! New Kaiji Malware Attacks IoT devices using SSH Brute Force The Kaiji malware was designed by a developer based in China to launch DDoS attacks according to researchers.Security researchers like Malwaremustdie ..

唉! New Kaiji Malware Attacks IoT devices using SSH Brute Force
secureblitz.com/kaiji-malwar...
#Infosec #Security #Cybersecurity #CeptBiro #Kaiji #MalwareAttacks #IoTdevices #SSH #BruteForce

Rene Robichaud

@neroqc.bsky.social

1 year ago

Microsoft fixed two zero-day flaws exploited in malware attacks Microsoft addressed two zero-day vulnerabilities (CVE-2024-29988 and CVE-2024-26234) actively exploited by threat actors to deliver malware

Microsoft fixed two zero-day bugs exploited in malware attacks
securityaffairs.com/161692/secur...
#Infosec #Security #Cybersecurity #CeptBiro #Microsoft #ZeroDay #MalwareAttacks