24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages Source: The Hacker News Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. “While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn’t d Read original
COLDCARD security audit phishing attack installs remote access tool Source: BleepingComputer A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software. […] Read original
COLDCARD security audit phishing attack installs remote access tool Source: BleepingComputer A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software. […] Read original
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Source: The Hacker News Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted arc Read original
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Source: The Hacker News Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted arc Read original
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Source: The Hacker News Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted arc Read original
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Source: The Hacker News Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted arc Read original
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation Source: The Hacker News The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, Read original
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation Source: The Hacker News The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, Read original
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation Source: The Hacker News The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, Read original