09/11

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

https://thehackernews.com/2023/09/cybercriminals-using-powershell-to.html
Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

Google Chrome Rolls Out Support for 'Privacy Sandbox' to Bid Farewell to Tracking Cookies

https://thehackernews.com/2023/09/google-chrome-rolls-out-support-for.html
Google Chrome Rolls Out Support for 'Privacy Sandbox' to Bid Farewell to Tracking Cookies

MGM Resorts shuts down IT systems after cyberattack

https://www.bleepingcomputer.com/news/security/mgm-resorts-shuts-down-it-systems-after-cyberattack/
MGM Resorts shuts down IT systems after cyberattack

New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World

https://thehackernews.com/2023/09/new-hijackloader-modular-malware-loader.html
New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World

Charming Kitten's New Backdoor 'Sponsor' Targets Brazil, Israel, and U.A.E.

https://thehackernews.com/2023/09/charming-kitens-new-backdoor-sponsor.html
Charming Kitten's New Backdoor 'Sponsor' Targets Brazil, Israel, and U.A.E.

Iranian hackers backdoor 34 orgs with new Sponsor malware

https://www.bleepingcomputer.com/news/security/iranian-hackers-backdoor-34-orgs-with-new-sponsor-malware/
Iranian hackers backdoor 34 orgs with new Sponsor malware

stake.com

http://Stake.com
stake.com

CISA warns govt agencies to secure iPhones against spyware attacks

https://www.bleepingcomputer.com/news/security/cisa-warns-govt-agencies-to-secure-iphones-against-spyware-attacks/
CISA warns govt agencies to secure iPhones against spyware attacks

孔夫子组织移动端最新攻击活动分析

https://mp.weixin.qq.com/s/nMTQww-jHkdKBWFPYdfprA
孔夫子组织移动端最新攻击活动分析

Title: DarkGate Loader delivered via Teams - Truesec

https://www.truesec.com/hub/blog/darkgate-loader-delivered-via-teams
Title: DarkGate Loader delivered via Teams - Truesec

Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

https://thehackernews.com/2023/09/vietnamese-hackers-deploy-python-based.html
Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

Getting Started With Malware Development - Crow's Nest

https://www.crow.rip/crows-nest/mal/dev/getting-started
Getting Started With Malware Development - Crow's Nest

Vulnerabilities Allow Hackers to Hijack, Disrupt Socomec UPS Devices - SecurityWeek

https://www.securityweek.com/vulnerabilities-allow-hackers-to-hijack-disrupt-socomec-ups-devices/
Vulnerabilities Allow Hackers to Hijack, Disrupt Socomec UPS Devices - SecurityWeek

Bookstore Chain Dymocks Discloses Data Breach Possibly Impacting 800k Customers - SecurityWeek

https://www.securityweek.com/bookstore-chain-dymocks-discloses-data-breach-possibly-impacting-800k-customers/
Bookstore Chain Dymocks Discloses Data Breach Possibly Impacting 800k Customers - SecurityWeek

Square: Last week’s outage was caused by DNS issue, not a cyberattack

https://www.bleepingcomputer.com/news/technology/square-last-weeks-outage-was-caused-by-dns-issue-not-a-cyberattack/
Square: Last week’s outage was caused by DNS issue, not a cyberattack

VirusTotal - File - fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc

https://www.virustotal.com/gui/file/fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc
VirusTotal - File - fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc

Sponsor with batch-filed whiskers: Ballistic Bobcat’s scan and strike backdoor

https://www.welivesecurity.com/en/eset-research/sponsor-batch-filed-whiskers-ballistic-bobcats-scan-strike-backdoor/
Sponsor with batch-filed whiskers: Ballistic Bobcat’s scan and strike backdoor

MalwareBazaar | SHA256 f6f14e614582f94e97f29dc96c69fa61767fd2f6bf5798ad96a7e3c34f189db7 (Formbook)

https://bazaar.abuse.ch/sample/f6f14e614582f94e97f29dc96c69fa61767fd2f6bf5798ad96a7e3c34f189db7/
MalwareBazaar | SHA256 f6f14e614582f94e97f29dc96c69fa61767fd2f6bf5798ad96a7e3c34f189db7 (Formbook)

Google fixes another Chrome zero-day bug exploited in attacks

https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/
Google fixes another Chrome zero-day bug exploited in attacks

Associated Press Stylebook Users Targeted in Phishing Attack Following Data Breach - SecurityWeek

https://www.securityweek.com/associated-press-stylebook-users-targeted-in-phishing-attack-following-data-breach/
Associated Press Stylebook Users Targeted in Phishing Attack Following Data Breach - SecurityWeek

Resume | suspicious.actor

https://suspicious.actor/resume/
Resume | suspicious.actor

CVE-2023-36844 And Friends: RCE In Juniper Devices

https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/
CVE-2023-36844 And Friends: RCE In Juniper Devices

MGM Resorts takes systems offline following cyberattack

https://therecord.media/mgm-resorts-offline-after-cyberattack
MGM Resorts takes systems offline following cyberattack

Microsoft will block 3rd-party printer drivers in Windows Update

https://www.bleepingcomputer.com/news/microsoft/microsoft-will-block-3rd-party-printer-drivers-in-windows-update/
Microsoft will block 3rd-party printer drivers in Windows Update

FBI Blames North Korean Hackers for $41 Million Stake.com Heist - SecurityWeek

https://www.securityweek.com/fbi-blames-north-korean-hackers-for-41-million-stake-com-heist/
FBI Blames North Korean Hackers for $41 Million Stake.com Heist - SecurityWeek

Evil Telegram: Trojanized Telegram apps found on Google Play

https://securityaffairs.com/150605/malware/evil-telegram-spyware-rogue-telegram.html
Evil Telegram: Trojanized Telegram apps found on Google Play

Facebook Messenger phishing wave targets 100K business accounts per week

https://www.bleepingcomputer.com/news/security/facebook-messenger-phishing-wave-targets-100k-business-accounts-per-week/
Facebook Messenger phishing wave targets 100K business accounts per week

After Microsoft and X, Hackers Launch DDoS Attack on Telegram - SecurityWeek

https://www.securityweek.com/after-microsoft-and-x-hackers-launch-ddos-attack-on-telegram/
After Microsoft and X, Hackers Launch DDoS Attack on Telegram - SecurityWeek