Latest Cybersecurity News and Articles

---

DoJ: Estonian Man Tried to Acquire US-Made Hacking Tools for Russia

According to the DoJ, email communication between Shevlyakov and a Russia-based individual has revealed that he attempted to acquire a licensed copy of Metasploit Pro, a US-made penetration testing tool that cannot be purchased from Russia directly.

---

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites. The attacks are known to play out in waves once every few weeks. "This campaign is easily identified

---

OpenAI to Offer Remedies to Resolve Italy’s ChatGPT Ban

The Italian data protection authority, known as Garante, last week blocked OpenAI’s popular chatbot, ordering it to temporarily stop processing Italian users’ personal information while it investigates a possible breach of EU data privacy rules.

---

BreachedForums shutdown sparks migration to ARES data leak forums

The group accepts cryptocurrency payments from members who want to access the offered data or purchase one of the available services, which span vulnerability exploitation, pen-testing, malware development, and DDoS attacks.

---

Protecting your business with Wazuh: The open source security platform

Today, businesses face a variety of security challenges like cyber attacks, compliance requirements, and endpoint security administration. The threat landscape constantly evolves, and it can be overwhelming for businesses to keep up with the latest security trends. Security teams use processes and security solutions to curb these challenges. These solutions include firewalls, antiviruses, data

---

Amazon Bans Flipper Zero, Claiming It Violates Policy Against Card Skimming Devices

The device went viral on TikTok last year, with users showing off how the cute little gadget could quickly turn them into amateur hackers. Among its capabilities is using the device to read a credit card number through a wallet and pants.

---

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

Apart from three bugs in the Veritas Backup Exec Agent software, the CISA also warned about a privilege escalation flaw impacting Microsoft Windows Certificate Dialog and an information disclosure flaw in Arm Mali GPU Kernel Driver.

---

Secret US Documents on Ukraine War Plan Spill Onto Internet: Report

Secret documents that provide details of US and NATO plans to help prepare Ukraine for a spring offensive against Russia have spilled onto social media platforms, the New York Times reported on Thursday.

---

Update: Western Digital struggles to fix massive My Cloud outage, offers workaround

"The Local Access feature allows you to directly access your personal files from a Windows or MacOS computer that is connected to the same network as your device," Western Digital said.

---

Mastodon Vulnerability Exposes Sensitive Information: Data Leak Alert

The vulnerability has been labeled CVE-2023-28853, with a " high " risk assessment. Mastodon versions from 2.5.0 were affected, but the developers have since closed the security gaps in versions 4.1.2, 4.0.4, and 3.5.8.

---

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. This includes three high-severity flaws in the Veritas Backup Exec Agent software (CVE-2021-27876, CVE-2021-27877, and CVE-2021-27878) that could lead to the execution of privileged commands

---

Hackers Hide Backdoors Behind Malicious Self-Extracting Archives

Malicious actors are incorporating harmful features into self-extracting archives created with WinRAR, which contain benign decoy files. This tactic enables them to implant backdoors on the targeted system without arousing any suspicion. An apparently empty SFX archive file can be missed by technology-based detections and easily overlooked by defenders. 

---

New Scam Alerts Users About YouTube Altering Policy

A phishing scam has come to light that uses YouTube's genuine no-reply@youtube[.]com email address to trick users into revealing their login details. The phishing email write-up contains a YouTube video and text informing users about YouTube’s new monetization policy and new rules. Meanwhile, YouTube has warned users to be cautious of the scam.

---

CryptoClippy: New Clipper Malware That Targets Portuguese Users

Cybercriminals launched a malvertising campaign involving malware named CryptoClippy to pilfer cryptocurrency from users in Portugal. Discovered by Palo Alto Networks Unit 42, the campaign uses SEO poisoning techniques to push users looking for "WhatsApp web" to fake domains containing malicious software. The scheme has helped the group make roughly $983.

---

FusionCore - An Emerging Malware-as-a-Service Group in Europe

Active since November, FusionCore acts as a one-stop-shop for cybercriminals; it offers services such as malware-as-a-subscription, hacking for hire, and ransomware. It has rolled out a ransomware affiliate program as well called AnthraXXXLocker. Typhon Reborn is one example of the group's proprietary malware.

---

Almost Every Organization Suffered a Cyberattack, Says Sophos

Over the last year, almost all organizations, at 94%, have faced some type of cyberattack. The survey data presented below is derived from responses provided by 3,000 cybersecurity and IT leaders from 14 countries and was collected between January and February.

---

Cybercrime: be careful what you tell your chatbot helper…

Alluring and useful they may be, but the AI interfaces’ potential as gateways for fraud and intrusive data gathering is huge – and is only set to growConcerns about the growing abilities of chatbots trained on large language models, such as OpenAI’s GPT-4, Google’s Bard and Microsoft’s Bing Chat, are making headlines. Experts warn of their ability to spread misinformation on a monumental scale, as well as the existential risk their development may pose to humanity. As if this isn’t worrying enough, a third area of concern has opened up – illustrated by Italy’s recent ban of ChatGPT on privacy grounds.The Italian data regulator has voiced concerns over the model used by ChatGPT owner OpenAI and announced it would investigate whether the firm had broken strict European data protection laws. Continue reading...

---

Taiwanese PC Company MSI Falls Victim to Ransomware Attack

Taiwanese PC company MSI (short for Micro-Star International) officially confirmed it was the victim of a cyber attack on its systems. The company said it "promptly" initiated incident response and recovery measures after detecting "network anomalies." It also said it alerted law enforcement agencies of the matter. That said, MSI did not disclose any specifics about when the attack took place

---

Google: North Korea-Linked Hackers Target Subject Experts and Think Tanks

Google’s TAG identified a new campaign by the North Korean ARCHIPELAGO threat cluster (aka APT43) targeting U.S. and South Korean governments, think tanks, military personnel, academics, policymakers, and researchers. Most notably, ARCHIPELAGO used fraudulent Google Chrome extensions in combination with phishing and malware to harvest sensitive data.

---

Color1337: Linux Cryptomining Attack Campaign Used uhQCCSpB Bot

The attackers use a bot called uhQCCSpB that installs and launches a Monero miner on the infected machine. After killing all other miners on the device, the attacker uses two different strategies to maximize access to the compromised Linux machine.