CrowdCyber - Nostr Hypermedia

Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts

Wonderland Unleashed: New Android "Dropper" Malware Hijacks Telegram to Drain Bank Accounts

Group-IB uncovers "Wonderland," a bidirectional Android SMS stealer in Uzbekistan that uses Telegram droppers to drain bank accounts and hi...

CrowdCyber.com 2 weeks ago

Critical RCE flaw impacts over 115,000 WatchGuard firewalls

BleepingComputer

Critical RCE flaw impacts over 115,000 WatchGuard firewalls

Over 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively explo...

CrowdCyber.com 2 weeks ago

Uzbek Users Under Attack by Android SMS Stealers

Dark Reading

Uzbek Users Under Attack by Android SMS Stealers

Telegram users in Uzbekistan are being targeted with Android SMS-stealer malware, and what

CrowdCyber.com 2 weeks ago

“Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia

Daily CyberSecurity

"Purchase Order" Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia

Cyble reveals a unified commodity loader targeting Europe & Middle East. It uses steganography and a unique UAC bypass to deploy multiple RATs.

CrowdCyber.com 2 weeks ago

“Tax Compliance” Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware

Daily CyberSecurity

"Tax Compliance" Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware

SEQRITE Labs uncovers a China-linked campaign targeting Indian firms with fake tax notices to install persistent Remote Access Trojans.

CrowdCyber.com 2 weeks ago

New MacSync malware dropper evades macOS Gatekeeper checks

BleepingComputer

New MacSync malware dropper evades macOS Gatekeeper checks

The latest variant of the MacSync information stealer targeting macOS systems is delivered through a digitally signed, notarized Swift application.

CrowdCyber.com 2 weeks ago

Threat Actors Exploit Zero-Day in WatchGuard Firebox Devices

Dark Reading

Threat Actors Exploit Zero-Day in WatchGuard Firebox Devices

With attacks on the critical firewall vulnerability, WatchGuard joins a list of edge device vendors whose products have been targeted in recent weeks.

CrowdCyber.com 2 weeks ago

Malicious npm package steals WhatsApp accounts and messages

BleepingComputer

Malicious npm package steals WhatsApp accounts and messages

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect c...

CrowdCyber.com 2 weeks ago

I caught a Rust DDoS botnet on my honeypot, reverse engineered it, and now I'm monitoring its targets in real-time https://www.reddit.com/r/netsec/comments/1pt2tv0/i_caught_a_rust_ddos_botnet_on_my_honeypot/

CrowdCyber.com 2 weeks ago

“Caminho” to Compromise: BlindEagle Hackers Hijack Government Emails in Colombia

Daily CyberSecurity

"Caminho" to Compromise: BlindEagle Hackers Hijack Government Emails in Colombia

CrowdCyber.com 2 weeks ago

The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling

Daily CyberSecurity

The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling

Samsung’s 2nm Exynos 2600 debuts with an all-big-core design and Heat Path Block cooling, aiming to end thermal throttling for the Galaxy S26.

CrowdCyber.com 2 weeks ago

The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky

Daily CyberSecurity

The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky

BlueDelta (APT28) is targeting UKR.NET users with a sophisticated phishing campaign using ngrok and Mocky to bypass security and steal 2FA codes.

CrowdCyber.com 2 weeks ago

n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access

Daily CyberSecurity

n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access

n8n warns of a CVSS 10.0 RCE (CVE-2025-68613) in its expression system. Attackers can seize total server control. Upgrade to v1.122.0 immediately.

CrowdCyber.com 2 weeks ago

TikTok’s “Scam-Yourself” Trap: How AuraStealer Malware Tricks Users into Hacking Their Own PCs

Daily CyberSecurity

TikTok’s “Scam-Yourself” Trap: How AuraStealer Malware Tricks Users into Hacking Their Own PCs

Gen Digital uncovers AuraStealer, a new infostealer using TikTok "Scam-Yourself" tactics to trick users into infecting their own Windows PCs.

CrowdCyber.com 2 weeks ago

Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows

Daily CyberSecurity

Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows

NIST warns of a critical Exim 4.99 flaw. A failed SQLi patch allows attackers to poison SQLite records and trigger a 1.5MB heap buffer overflow.

CrowdCyber.com 2 weeks ago

Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack https://www.reddit.com/r/netsec/comments/1ps3taw/vulnhalla_picking_the_true_vulnerabilities_from/

CrowdCyber.com 2 weeks ago

The $0 Transaction That Signaled a Nation-State Cyberattack

A $0 card test signaled a Chinese state-linked cyberattack on Anthropic’s AI platform. Learn how card-testing fraud intelligence spots nation-sta...

CrowdCyber.com 3 weeks ago

CISA warns ASUS Live Update backdoor is still exploitable, seven years on

Malwarebytes

CISA warns ASUS Live Update backdoor is still exploitable, seven years on

Seven years after the original attack, CISA has added the ASUS Live Update backdoor to its Known Exploited Vulnerabilities catalog.

CrowdCyber.com 3 weeks ago

New critical WatchGuard Firebox firewall flaw exploited in attacks

BleepingComputer

New critical WatchGuard Firebox firewall flaw exploited in attacks

WatchGuard has warned customers to patch a critical, actively exploited remote code execution (RCE) vulnerability in its Firebox firewalls.

CrowdCyber.com 3 weeks ago

Over 25,000 FortiCloud SSO devices exposed to remote attacks

BleepingComputer

Over 25,000 FortiCloud SSO devices exposed to remote attacks

Internet security watchdog Shadowserver has found over 25,000 Fortinet devices exposed online with FortiCloud SSO enabled, amid ongoing attacks tar...