All posts tagged news

■■■□□ #DataLeak: Data from Kopter’s internal network has been published on the LockBit’s blog, hosted on the dark web. https://www.zdnet.com/article/ransomware-hits-helicopter-maker-kopter/ https://t.me/cKure/6248

■■□□□ MetaMask phishing steals cryptocurrency wallets via Google ads. https://www.bleepingcomputer.com/news/security/metamask-phishing-steals-cryptocurrency-wallets-via-google-ads/ https://t.me/cKure/6246

■■□□□ #Israel hit again. Iranian Hackers Attack Israeli water facility, gain access to HMI systems. Looks like the country needs major improvements in cyber security aspects. #CyberAttack #CyberWar #Iran https://www.ehackingnews.com/2020/12/iranian-hackers-attack-israel-water.html https://t.me/cKure/6245

■■■□□ 10K USD for Facebook SSRF. https://medium.com/@amineaboud/10000-facebook-ssrf-bug-bounty-402bd21e58e5 https://t.me/cKure/6244

■■■■□ #Israel #DataLeak: Black Shadow group continue to leak dozens of documents of Shirbit Insurance company online as they await their ransome of 1 million USD. https://t.me/cKure/6243

■■■■□ Credit card stealing malware hides in social media sharing icons. https://www.bleepingcomputer.com/news/security/credit-card-stealing-malware-hides-in-social-media-sharing-icons/ https://t.me/cKure/6242

■■■■□ Websites Can Run Arbitrary Code on Machines Running the ‘PlayStation Now’ Application. https://hackerone.com/reports/873614 https://t.me/cKure/6241

■■■□□ Hacker Busra Demir’s latest Hacking How-To, XML External Entity (XXE) Injection All-in-One. https://youtu.be/gn3c5iRzeXY https://t.me/cKure/6240

■■■□□ Researchers have discovered a new MacOS backdoor that steals credentials and confidential information. As cyber threats continue to rise, the newly discovered malware is believed to be operated by Vietnamese hacking group OceanLotus, colloquially known as APT 32. Other common names include APT-C-00, SeaLotus, and Cobalt Kitty. https://www.ehackingnews.com/2020/12/updated-malware-vietnamese-hacking.html https://t.me/cKure/6239

■■□□□ Chaining vulnerabilities lead to account takeover. https://ahzsec.medium.com/chaining-vulnerabilities-lead-to-account-takeover-b583f0c10591 https://t.me/cKure/6236