JavaRockstar

On Friday, GitHub, an open-source software hosting site, said that it had uncovered evidence of an unknown attacker illegally acquiring sensitive data from several organizations using stolen OAuth user credentials. “An attacker utilized stolen OAuth user credentials given to two third-party OAuth integrators, Heroku and Travis-CI, to access data from a variety of organizations, including … Read more

Google has removed apps that were found to be covertly copying contact information. More than a dozen applications have been withdrawn from Google’s Play Store after it was discovered that they had malicious code that collected people’s geolocation, telephone numbers, and email addresses. A QR code scanner, a weather app, and Muslim prayer applications are … Read more

US and foreign law enforcement officials have taken control of a popular website where hackers have marketed data stolen from American individuals and corporations, the latest in a long-running effort to crack down on forums where cybercriminals gather. According to a notice put on RaidForums’ home page on Tuesday, “this domain has been seized” by … Read more

According to a recent security investigation by Meta, a Belarus-aligned hacking group attempted to get access to Ukrainian military personnel’s Facebook accounts and broadcast videos calling for the Ukrainian army to surrender using hijacked accounts. The hacking attack, dubbed “Ghostwriter” by security researchers, was carried out by a group known as UNC1151, which according to … Read more

Over 900,000 emails from Russian official media are said to have been exposed by a cyber gang. Hundreds of thousands of emails from Russia’s largest state media business the State Television and Radio Broadcasting Corporation of Russia (VGTRK). Have allegedly been released by a gang of hackers who claim to be affiliated with Anonymous. The … Read more

According to a revelation by Bleeping Computer, Mailchimp, an email marketing provider, was hacked on March 26th. When a customer support tool was hacked, the organization became aware of the hostile occurrence. Mailchimp was bought by Intuit, a financial software company, in September 2020. Mailchimp says it was hacked. According to Siobhan Smyth, their chief … Read more

Remote attackers might use the Brokenwire exploit to disrupt electric vehicle charging. According to a new study from the University of Oxford and Armasuisse S+T, a mechanism for attacking a common charging system has been discovered, which might cause significant issues for electric vehicles. The “Brokenwire” strategy compels the automobile to cancel its charging session … Read more

For 15 years, supply chain issues in the PHP package management PEAR went unnoticed. PEAR was vulnerable to attack due to a cryptographic vulnerability and a problem in an out-of-date dependency. According to security experts, attackers could have caused havoc on the PHP ecosystem by exploiting a pair of long-standing vulnerabilities in package management PEAR … Read more

A Belarusian threat actor that is known as Ghostwriter (aka UNC1151) has been observed leveraging a browser-in-the-browser technique. This method simulates a browser window in order to launch convincing social engineering campaigns. The Ghostwriter hacking group has used this technique, which masquerades as a legitimate domain by simulating a browser window over the website, to … Read more

A threat actor of likely Pakistani origin has been attributed to another Windows-based remote access Trojan named CrimsonRAT. The malware is at least six months old and was first reported back in late June. The name Transparent Tribe might sound familiar to some of you. Cisco Talos has been investigating this group for a while … Read more

What would happen if a software maintainer added malicious code to a popular library? To answer this question, we can look to the latest software supply-chain attack. A malicious code was hidden in node-ipc to replace files with a heart emoji and a peacenotwar module. A developer has taken a tool that he created and … Read more

Anonymous, a collective of hackers and activists, reportedly hacked the Russian telecoms agency Roscomnadzor, which censors pirate sites and media. The breach leaked 820GB worth of data, which has yet to be analyzed. Anonymous claims it obtained 360,000 files from the servers. Although it’s too soon to know for sure, this hack may have revealed … Read more

Security researchers have disclosed a new type of attack that amplifies the original packet by a ratio of more than 4 billion to one. The attack is distributed and uses a single packet as a starting point. A DDoS attack from a single packet is made possible by a flaw in about 2,600 Mitel MiVoice … Read more