CrowdCyber.com 2 weeks ago

WhatsApp device linking abused in account hijacking attacks

BleepingComputer

WhatsApp device linking abused in account hijacking attacks

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign dubbed GhostPairing.

CrowdCyber.com 2 weeks ago

Amazon: Ongoing cryptomining campaign uses hacked AWS accounts

BleepingComputer

Amazon: Ongoing cryptomining campaign uses hacked AWS accounts

Amazon's AWS GuardDuty security team is warning of an ongoing crypto-mining campaign that targets its Elastic Compute Cloud (EC2) and Elastic ...

CrowdCyber.com 2 weeks ago

RTO Challan Scam: How a Fake Traffic Ticket and a Malicious VPN Can Drain Your Bank Account

Daily CyberSecurity

RTO Challan Scam: How a Fake Traffic Ticket and a Malicious VPN Can Drain Your Bank Account

RTO Challan malware hijacks Android devices in India using a fake traffic ticket lure, a malicious VPN, and SMS interception to steal UPI PINs and ...

CrowdCyber.com 2 weeks ago

Inside the CopyCop Playbook: How to Fight Back in the Age of Synthetic Media

Inside the CopyCop Playbook: How to Fight Back in the Age of Synthetic Media

Uncover how Russia’s CopyCop network uses AI-generated news and fake media sites to influence global audiences—and learn the key defenses again...

CrowdCyber.com 2 weeks ago

Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes

Daily CyberSecurity

Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes

Ink Dragon is weaponizing government servers in Europe using a relay-centric mesh. By hijacking IIS servers, they mask C2 traffic across global net...

CrowdCyber.com 2 weeks ago

Attackers Use Stolen AWS Credentials in Cryptomining Campaign

Dark Reading

Attackers Use Stolen AWS Credentials in Cryptomining Campaign

Threat actors wielding stolen AWS Identity and Access Management (IAM) credentials leverage Amazon EC and EC2 infrastructure across multiple custom...

CrowdCyber.com 2 weeks ago

Critical Fortinet Flaws Under Active Attack

Dark Reading

Critical Fortinet Flaws Under Active Attack

Attackers are targeting admin accounts, and once authenticated, exporting device configurations including hashed credentials and other sensitive data.

CrowdCyber.com 2 weeks ago

How Ransomware Affects Business Operations, Revenue, and Brand Reputation

How Ransomware Affects Business Operations, Revenue, and Brand Reputation

Learn how ransomware works, how it can impact operations, revenue, and brand reputation, and how to prevent ransomware from infecting your business.

CrowdCyber.com 2 weeks ago

Two Chrome flaws could be triggered by simply browsing the web: Update now

Malwarebytes

Two Chrome flaws could be triggered by simply browsing the web: Update now

Google pushed out a patch for two more security vulnerabilities in the Chrome browser. Update now!

CrowdCyber.com 2 weeks ago

GhostPoster attacks hide malicious JavaScript in Firefox addon logos

BleepingComputer

GhostPoster attacks hide malicious JavaScript in Firefox addon logos

A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions counting more than 50,000...

CrowdCyber.com 2 weeks ago

Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices

Daily CyberSecurity

Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices

Sandworm (APT44) has shifted tactics, favoring misconfigured edge devices over complex exploits to breach energy and telecom sectors via credential...

CrowdCyber.com 2 weeks ago

Browser Extension Harvests 8M Users' AI Chatbot Data

Dark Reading

Browser Extension Harvests 8M Users’ AI Chatbot Data

Urban VPN Proxy, which claims to protect users

CrowdCyber.com 2 weeks ago

NexusRoute Uncovered: Android RAT Impersonates Indian E-Challan via GitHub for UPI Fraud & Surveillance

Daily CyberSecurity

NexusRoute Uncovered: Android RAT Impersonates Indian E-Challan via GitHub for UPI Fraud & Surveillance

NexusRoute is a sophisticated Android RAT campaign impersonating Indian E-Challan/mParivahan via GitHub phishing. It steals UPI PINs and conducts s...

CrowdCyber.com 2 weeks ago

Most Parked Domains Now Serving Malicious Content

Most Parked Domains Now Serving Malicious Content – Krebs on Security

CrowdCyber.com 2 weeks ago

Critical FreePBX Flaw (CVE-2025-66039) Risks PBX Takeover via Authentication Bypass in ‘webserver’ Auth Mode

Daily CyberSecurity

Critical FreePBX Flaw (CVE-2025-66039) Risks PBX Takeover via Authentication Bypass in 'webserver' Auth Mode

A critical authentication bypass (CVSS 9.3) in FreePBX allows complete PBX takeover when the 'webserver' auth mode is enabled. Attackers can gain a...

CrowdCyber.com 2 weeks ago

Cellik Android malware builds malicious versions from Google Play apps

BleepingComputer

Cellik Android malware builds malicious versions from Google Play apps

A new Android malware-as-a-service (MaaS) named Cellik is being advertised on underground cybercrime forums offering a robust set of capabilities t...

CrowdCyber.com 2 weeks ago

New SantaStealer malware steals data from browsers, crypto wallets

BleepingComputer

New SantaStealer malware steals data from browsers, crypto wallets

A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory t...

CrowdCyber.com 2 weeks ago

Hackers exploit newly patched Fortinet auth bypass flaws

BleepingComputer

Hackers exploit newly patched Fortinet auth bypass flaws

Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to admin accounts and stea...

CrowdCyber.com 2 weeks ago

5-Year Threat: Malicious NuGet Package Used Homoglyphs and Typosquatting to Steal Crypto Wallets

Daily CyberSecurity

5-Year Threat: Malicious NuGet Package Used Homoglyphs and Typosquatting to Steal Crypto Wallets

A malicious NuGet package (Tracer.Fody.NLog) stole crypto wallet data for 5 years using homoglyphs and typosquatting to evade detection. The .NET s...

CrowdCyber.com 2 weeks ago

Flaw in Hacktivist Ransomware Lets Victims Decrypt Own Files

Dark Reading

Flaw in Hacktivist Ransomware Lets Victims Decrypt Own Files

A new version of VolkLocker, wielded by the pro-Russia RaaS group CyberVolk, has some key enhancements but one fatal flaw.