2024-04-24 | Hacker Trends

8 tweets

[QuickNote] Qakbot 5.0 – Decrypt strings and configuration | 0day in {REA_TEAM}

https://kienmanowar.wordpress.com/2024/04/24/quicknote-qakbot-5-0-decrypt-strings-and-configuration/

6 tweets

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices

https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/

5 tweets

ETW-ByeBye: Disabling ETW-TI Without PPL | Legacyy

https://www.legacyy.xyz/defenseevasion/windows/2024/04/24/disabling-etw-ti-without-ppl.html

5 tweets

CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

https://thehackernews.com/2024/04/coralraider-malware-campaign-exploits.html

5 tweets

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

https://thehackernews.com/2024/04/major-security-flaws-expose-keystrokes.html

4 tweets

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

https://thehackernews.com/2024/04/escan-antivirus-update-mechanism.html

4 tweets

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

https://thehackernews.com/2024/04/researchers-detail-multistage-attack.html

4 tweets

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

https://thehackernews.com/2024/04/us-treasury-sanctions-iranian-firms-and.html

4 tweets

Ring customers get $5.6 million in privacy breach settlement

https://www.bleepingcomputer.com/news/security/ring-customers-get-56-million-in-privacy-breach-settlement/

4 tweets

Windows 11 KB5036980 update goes live with Start Menu ads

https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5036980-update-goes-live-with-start-menu-ads/

4 tweets

x33fcon

https://x33fcon.com/#!w/FabianMoschSvenRath.md

4 tweets

Social engineering aspect of the XZ incident | Securelist

https://securelist.com/xz-backdoor-story-part-2-social-engineering/112476/

3 tweets

ArcaneDoor hackers exploit Cisco zero-days to breach govt networks

https://www.bleepingcomputer.com/news/security/arcanedoor-hackers-exploit-cisco-zero-days-to-breach-govt-networks/

3 tweets

Rust-for-Malware-Development/Threads/local_thread_hijacking.rs at main · Whitecat18/Rust-for-Malware-Development · GitHub

https://github.com/Whitecat18/Rust-for-Malware-Development/blob/main/Threads/local_thread_hijacking.rs

3 tweets

Institute for Security and TechnologyAnnouncing Finalists for the inaugural Cyber Policy Awards - Institute for Security and Technology

https://securityandtechnology.org/blog/announcing-finalists-for-the-inaugural-cyber-policy-awards/

3 tweets

[QuickNote] Qakbot 5.0 – Decrypt strings and configuration | 0day in {REA_TEAM}

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices

ETW-ByeBye: Disabling ETW-TI Without PPL | Legacyy

CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

Ring customers get $5.6 million in privacy breach settlement

Windows 11 KB5036980 update goes live with Start Menu ads

x33fcon

Social engineering aspect of the XZ incident | Securelist

ArcaneDoor hackers exploit Cisco zero-days to breach govt networks

Rust-for-Malware-Development/Threads/local_thread_hijacking.rs at main · Whitecat18/Rust-for-Malware-Development · GitHub

CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon - Rhino Security Labs

CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation - SecurityWeek

Street lights in Leicester City cannot be turned off due to a cyber attack

CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon - Rhino Security Labs

A Practical Guide to PrintNightmare in 2024 | itm4n's blog

GitHub - Meowmycks/LetMeowIn: A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

Hackers publish fake story about Ukrainians attempting to assassinate Slovak president

Microsoft releases Exchange hotfixes for security update issues

US offers a $10M reward for information on four Iranian nationals

Rust-for-Malware-Development/syscalls.rs at main · Whitecat18/Rust-for-Malware-Development · GitHub

Institute for Security and TechnologyAnnouncing Finalists for the inaugural Cyber Policy Awards - Institute for Security and Technology

GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining - Avast Threat Labs

GitHub - mansk1es/CVE-2024-21111: Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability

Log in to X / X

FTC Announces Rule Banning Noncompetes | Federal Trade Commission