Skip to main content

CodeBreach

CodeBreach - Your trusted source for the latest news and updates on the constantly evolving world of cyber hacking, data breaches, and digital security. Stay informed and stay protected with CodeBreach.

Search This Blog

Posts

Unveiling the Cyber Underworld: Rhadamanthys and AsyncRAT - The Evolution of Stealthy Threats 🌐🔒 #Cybersecurity #MalwareMayhem

on December 18, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

The Silent Menace: Microsoft Reveals Adversaries Exploiting OAuth Applications for Cryptomining and Phishing Escapades!

on December 13, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unveiling Cyber Espionage Tango: Sandman and Storm-0866 Dance with China's KEYPLUG in Coordinated Symphony

on December 11, 2023

Cyber Security Data Breach

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Breaking Boundaries: Unveiling SLAM - The Covert Threat to Intel, AMD, and Arm CPUs

on December 09, 2023

Cyber Attack Cyber Security Vulnerability

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Ransomware Rampage: Unmasking the Dark World of Ransomware-as-a-Service and the Explosive Threat Landscape

on December 08, 2023

Cyber Attack Cyber Security Ransomware

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unmasking the Underworld: The Silent Threat of Malicious Browser Extensions and How to Shield Your Organization

on December 06, 2023

Cyber Security Data Breach

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Code Hijack Alert: Over 15,000 Go Repositories on GitHub Vulnerable to Repojacking Threats!

on December 05, 2023

Cyber Security Data Breach

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Firmware in Peril: LogoFAIL Exposes Critical UEFI Vulnerabilities with Far-reaching Impact

on December 04, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unmasking Agent Racoon: Stealthy Cyber Threat Strikes Organizations Across the Globe!

on December 03, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

The Great Firewall Breach: Unmasking SugarGh0st RAT's Covert Assault on Uzbekistan and South Korea

on December 01, 2023

Cyber Attack Cyber Security Firewall

+

Get link
Facebook
X
Pinterest
Email
Other Apps

The Google Workspace DeleFriend Scandal: Unveiling a Severe Security Flaw Shaking the Foundations of User Data Protection

on November 28, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unveiling SysJoker's Next Act: Rust Variant Emerges in Cyber Espionage Amidst Middle East Tensions

on November 24, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Breaking the Biometric Barrier: Unmasking Windows Hello Flaws on Dell, Lenovo, and Microsoft Laptops!

on November 23, 2023

Cyber Attack Cyber Security Vulnerability

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Trending News

Urgent Alert: 8Base Group Unleashes New Phobos Ransomware Variant via SmokeLoader - Safeguard Your Systems Now!

Dear Readers, We bring to your attention a critical cybersecurity threat as the notorious 8Base Group has unleashed a new variant of the Phobos Ransomware through the use of SmokeLoader. This sophisticated attack poses a severe risk to organizations and individuals alike, targeting sensitive data and demanding ransoms for decryption. The Modus Operandi The 8Base Group, known for their advanced and malicious tactics, has chosen SmokeLoader as the initial infection vector. SmokeLoader is a well-known downloader used to deliver various payloads, including ransomware. Once a system is compromised, the new variant of Phobos Ransomware swiftly encrypts files, rendering them inaccessible to the victim. The attackers then demand a ransom in cryptocurrency, often with a threat of permanently losing access to crucial data if payment is not made within a specified timeframe. ...

New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

In recent years, fingerprint-based authentication has become a popular security measure in smartphones, providing users with a convenient and quick way to unlock their devices. However, a new vulnerability known as the BrutePrint attack has emerged, exposing the weaknesses in this biometric security method. BrutePrint attack is a technique that allows attackers to unlock smartphones by brute-forcing the fingerprint authentication. Unlike previous attacks that focused on bypassing or spoofing the fingerprint sensor, BrutePrint attack exploits the limited number of attempts allowed by the device before it locks down. How does the BrutePrint Attack work? When a user sets up fingerprint authentication on their smartphone, the device stores a digital representation of their fingerprint called a "template." This template is used to verify the user's fingerprint each time they attempt to unlock the device. The BrutePrint attack takes advantage of the...

Code Hijack Alert: Over 15,000 Go Repositories on GitHub Vulnerable to Repojacking Threats!

New research has brought to light a significant security concern in over 15,000 Go module repositories on GitHub. These repositories are found to be vulnerable to an attack known as repojacking, a technique that enables bad actors to exploit GitHub username changes and deletions to stage open-source software supply chain attacks. Jacob Baines, Chief Technology Officer at VulnCheck, shared in a report that more than 9,000 repositories are susceptible to repojacking due to GitHub username changes, while over 6,000 repositories face the risk due to account deletions. Collectively, these repositories account for no less than 800,000 Go module versions. What is Repojacking? Repojacking, a portmanteau of "repository" and "hijacking," allows attackers to create a repository with the same name as a pre-existing one by taking advantage of account username changes and deletions. This poses a serious threat to the integrity of open-source software. Go...

Unveiling the Cyber Underworld: Rhadamanthys and AsyncRAT - The Evolution of Stealthy Threats 🌐🔒 #Cybersecurity #MalwareMayhem

Recent reports from cybersecurity firm Check Point indicate that the developers behind the information-stealing malware, Rhadamanthys, are actively enhancing its features and expanding its capabilities through a plugin system. This evolution transforms it into a more customizable and potent threat. Rhadamanthys, initially documented in October 2022, operates under the malware-as-a-service (MaaS) model and has been sold by an actor known as "kingcrete2022." It is commonly distributed through malicious websites mimicking genuine software sites advertised through Google ads. Rhadamanthys Features and Evolution As of the latest update, version 0.5.2, Rhadamanthys exhibits a new plugin system, turning it into a versatile tool for specific distributor needs. This system allows customers to deploy additional tools tailored to their targets, making it more than just an information stealer. The malware's components are both active and passive, capable of o...

Unveiling Cyber Espionage Tango: Sandman and Storm-0866 Dance with China's KEYPLUG in Coordinated Symphony

Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that's known to use a backdoor known as KEYPLUG. The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligence team based on the fact that the adversary's Lua-based malware LuaDream and KEYPLUG have been determined to cohabit "in the same victim networks." "There are strong overlaps in operational infrastructure, targeting, and TTPs associating the Sandman APT with China-based adversaries using the KEYPLUG backdoor, STORM-0866/Red Dev 40 in particular," the researchers said. "This highlights the complex nature of the Chinese threat landscape." For more details, you can read the full report from SentinelOne , PwC , and the Microsoft Threat Intelligence team .

Category

Cyber Attack59 Cyber Security49 Malware42 Vulnerability31 Ransomware20 Hacking15 Threat14 Data Breach12 Trojan9 Security5

BitCoin4 Gaming3 Phishing3 Android - Trojan2 Cryptocurrency2 Facebook Meta2 GitHub2 Malicious2 Scams2 Apple1 Emote Malware1 Exploit1 Firewall1 Microsoft1 Python1 WhatsApp1 Wordpress1

Show more Show less

Privacy

Powered by Blogger