Skip to main content

CodeBreach

CodeBreach - Your trusted source for the latest news and updates on the constantly evolving world of cyber hacking, data breaches, and digital security. Stay informed and stay protected with CodeBreach.

Search This Blog

Posts

Unmasking WailingCrab: Navigating the Stealthy Seas of a Sophisticated Malware Loader's Delivery Tactics

on November 23, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Alert: Randstorm Exploit Threatens Bitcoin Wallets Created 2011-2015 - Urgent Action Required!

on November 20, 2023

BitCoin Cyber Attack

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Urgent Alert: 8Base Group Unleashes New Phobos Ransomware Variant via SmokeLoader - Safeguard Your Systems Now!

on November 18, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Alert: Deceptive Google Ads Exploit WinSCP Users, Distributing Malware - Stay Informed, Stay Secure!

on November 18, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unmasking the Surge: Pro-Russian Hacktivists and the Rising Wave of DDoS Attacks in Q2

on July 21, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

8Base Ransomware Surge: Researcher Warns of Growing Threat and Urges Preemptive Measures

on July 02, 2023

Cyber Security Ransomware

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unpatched WordPress Plugin Flaw: Hackers Exploit Vulnerability to Create Stealth Admin Accounts

on July 02, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

New AitM Phishing and BEC Attacks Targeting Banking and Financial Services

on June 11, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!

on June 11, 2023

+

Get link
Facebook
X
Pinterest
Email
Other Apps

New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

on May 29, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Unveiling Predator Android Spyware: The Insidious Data Thief Revealed!

on May 28, 2023

Cyber Attack Cyber Security Vulnerability

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Defending Against the Stealthy Bandit Stealer: Protecting Your Web Browsers and Cryptocurrency Wallets

on May 28, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

RecordBreaker Info-stealer Propagates Via Fake Keygens and Cracks

on May 19, 2023

Cyber Attack Cyber Security

+

Get link
Facebook
X
Pinterest
Email
Other Apps

Trending News

Breaking Boundaries: Unveiling SLAM - The Covert Threat to Intel, AMD, and Arm CPUs

Researchers from the Vrije Universiteit Amsterdam have uncovered a new side-channel attack dubbed SLAM, capable of exploiting current and upcoming CPUs from Intel, AMD, and Arm. The attack exploits a feature in Intel CPUs called Linear Address Masking (LAM), analogous counterparts from AMD (Upper Address Ignore or UAI), and Arm (Top Byte Ignore or TBI). SLAM serves as an end-to-end exploit for Spectre, utilizing unmasked gadgets to leak arbitrary ASCII kernel data. This could potentially lead to the leakage of sensitive information, such as the root password hash, from kernel memory within minutes. While LAM is introduced as a security feature, the research indicates that it ironically diminishes security and significantly expands the Spectre attack surface. The attack involves a transient execution attack, leveraging speculative execution to extract sensitive data through a cache covert channel. Described as the first transient execution attack...

Unveiling the Cyber Underworld: Rhadamanthys and AsyncRAT - The Evolution of Stealthy Threats 🌐🔒 #Cybersecurity #MalwareMayhem

Recent reports from cybersecurity firm Check Point indicate that the developers behind the information-stealing malware, Rhadamanthys, are actively enhancing its features and expanding its capabilities through a plugin system. This evolution transforms it into a more customizable and potent threat. Rhadamanthys, initially documented in October 2022, operates under the malware-as-a-service (MaaS) model and has been sold by an actor known as "kingcrete2022." It is commonly distributed through malicious websites mimicking genuine software sites advertised through Google ads. Rhadamanthys Features and Evolution As of the latest update, version 0.5.2, Rhadamanthys exhibits a new plugin system, turning it into a versatile tool for specific distributor needs. This system allows customers to deploy additional tools tailored to their targets, making it more than just an information stealer. The malware's components are both active and passive, capable of o...

Unveiling Cyber Espionage Tango: Sandman and Storm-0866 Dance with China's KEYPLUG in Coordinated Symphony

Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that's known to use a backdoor known as KEYPLUG. The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligence team based on the fact that the adversary's Lua-based malware LuaDream and KEYPLUG have been determined to cohabit "in the same victim networks." "There are strong overlaps in operational infrastructure, targeting, and TTPs associating the Sandman APT with China-based adversaries using the KEYPLUG backdoor, STORM-0866/Red Dev 40 in particular," the researchers said. "This highlights the complex nature of the Chinese threat landscape." For more details, you can read the full report from SentinelOne , PwC , and the Microsoft Threat Intelligence team .

The Silent Menace: Microsoft Reveals Adversaries Exploiting OAuth Applications for Cryptomining and Phishing Escapades!

Microsoft has issued a stark warning about the growing exploitation of OAuth applications by adversaries, who are now utilizing them as an automation tool to deploy virtual machines for cryptocurrency mining and launch sophisticated phishing attacks. The Microsoft Threat Intelligence team has analyzed these attacks, revealing a concerning trend where threat actors compromise user accounts to create, modify, and grant high privileges to OAuth applications. These applications then serve as a camouflage for malicious activities, allowing threat actors to hide their actions effectively. "The misuse of OAuth also enables threat actors to maintain access to applications even if they lose access to the initially compromised account." One notable adversary in these campaigns is identified as Storm-1283. This threat actor has been observed leveraging a compromised user account to create an OAuth application, subsequently deploying virtual machines for...

Unmasking the Underworld: The Silent Threat of Malicious Browser Extensions and How to Shield Your Organization

Compromising the browser remains a high-return target for adversaries, and recent incidents like DataSpii and Nigelthorn underscore the dangers of malicious browser extensions. These small software modules, designed to enhance browsing experiences, have become a prominent attack vector due to their wide adoption and susceptibility to turning malicious. Types of Malicious Extensions Malicious extensions can be categorized into three main groups: Initially Malicious Extensions Compromised Extensions Risky Extensions How Extensions Get Installed Malicious extensions infiltrate browsers through various methods, each posing distinct security considerations: Admin Installation Normal Installation Developer Installation Sideload Installation Indicators of Potentially Malicious Extensions Given the potential risks associated with user-installed extensions, it's crucial to i...

Category

Cyber Attack59 Cyber Security49 Malware42 Vulnerability31 Ransomware20 Hacking15 Threat14 Data Breach12 Trojan9 Security5

BitCoin4 Gaming3 Phishing3 Android - Trojan2 Cryptocurrency2 Facebook Meta2 GitHub2 Malicious2 Scams2 Apple1 Emote Malware1 Exploit1 Firewall1 Microsoft1 Python1 WhatsApp1 Wordpress1

Show more Show less

Privacy

Powered by Blogger