More results...
IDA Pro FLIRT signature for FlowCloud RAT component, “fcClientDll and Indicators mentioned in my presentation “USB flows in the Great River”. In the realm of cybersecurity, the unassuming USB drive can be a Trojan horse. Dive into the world of USB-based threats as we explore the creation of IDA Pro FLIRT signatures for the elusive […]
What Happened Since The Last EMBA Release? There was the absolute great #Hackersummercamp with our talks at BSidesLV, ICS Village (DEF CON) and Black Hat (Arsenal). The recording of the BSides talk is already available here. Beside this, Nate did a really great talk at BruCON – see here. Beside a lot of code cleanup, bug fixing and some […]
The frequency of hackers exploiting macOS flaws varies over time, but Apple continuously releases security updates to patch vulnerabilities. While macOS is generally considered more secure than some other operating systems but, it is not immune to exploitation, and hackers may target it, especially if they discover new vulnerabilities. Recently, cybersecurity researchers at Elastic Security […]
The post Hackers Attacking Blockchain Engineers with Novel macOS Malware appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
Hackers can exploit Massive Domain Generator and URL Shortener services by creating large numbers of deceptive or malicious domains and using URL shorteners to hide the true destination of links. This can be used for the following illicit purposes:- Recently, cybersecurity analysts at Infoblox uncovered a massive domain generator and URL shortener service dubbed “Prolific […]
The post Uncovering Prolific Puma, Massive Domain Generator & URL Shortener appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
F5 Networks has issued a security alert about a severe vulnerability in its BIG-IP Configuration utility, identified as CVE-2023-46748. This vulnerability is an authenticated SQL injection flaw that allows attackers with network access to execute arbitrary system commands. F5 Networks has categorized this issue under CWE-89, indicating an ‘Improper Neutralization of Special Elements used in […]
The post F5 Warns of Active Attacks Targeting BIG-IP SQL injection vulnerability appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
HWP documents are primarily associated with the Hangul Word Processor software used in South Korea. Hackers may opt for HWP documents to target National Defense and Press Sectors because they exploit vulnerabilities in this specific file format and software, which may not be as widely monitored or protected as more common document formats like PDF […]
The post Hackers Weaponize HWP Documents to Attack Defense and Press Sectors appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
Research has found 91% of CEOs view IT security as a technical function that’s the CIO or CISO’s problem, meaning IT leaders have more work to do to engage senior executives and boards.
Furl is a tool for mining URLs from Wayback Machine for bug hunting/fuzzing/further probing. Furl is a powerful tool designed for bug hunters, fuzzers, and those seeking to probe the depths of the web. This article explores how Furl can be used to mine URLs from the Wayback Machine, opening up new possibilities for uncovering […]
Free to use IOC feed for various tools/malware. It started out for just C2 tools but has morphed into tracking infostealers and botnets as well. It uses Shodan searches to collect the IPs. The most recent collection is always stored in data; the IPs are broken down by tool and there is an all.txt. The feed should update daily. Actively […]
A utility for playing with cryptography, geared towards ransomware analysis. CryptoTester is a powerful utility designed for in-depth cryptographic analysis, with a particular focus on ransomware investigation. In this article, we’ll explore how CryptoTester provides a robust set of tools and features to aid in dissecting and understanding cryptographic elements, making it an invaluable asset […]