Cybersecurity & InfoSec

/cybersecurity283

Incentivize good Cybersecurity Hygiene - Come help build a Web3 Security DAO! /scam to report scams! Let's make web3 safer.

348747

noname 🥸

@n3rd·20 hours ago

🛑 Hacker Caught Mid-Interview—Live on Zoom!

North Korean attackers are posing as job applicants using fake resumes, AI tools, and stealth malware to breach companies. Some have slipped through.

OtterCookie v4 reveals just how deep the campaign goes—stealing credentials, crypto wallets, even iCloud Keychain data.

🔗 See the full story → https://thehackernews.com/2025/05/ottercookie-v4-adds-vm-detection-and.html

OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities

OtterCookie v4 adds VM evasion and MetaMask theft in April 2025, signaling rapid malware evolution.

Cybersecurity & InfoSec

OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware

- YouTube

Europol Shuts Down Six DDoS-for-Hire Services Used in Global Attacks

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

Update ASAP: Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers

Leaked Files Tie Chinese Cybersecurity Firm to Government Censorship

Chinese Group TheWizards Exploits IPv6 to Drop WizardNet Backdoor

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

🎬𝐋𝐢𝐬𝐭 𝐨𝐟 𝐇𝐚𝐜𝐤𝐞𝐫 𝐚𝐧𝐝 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐌𝐨𝐯𝐢𝐞𝐬🍿

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems

Pro-Russian hacker group targets over 50 Dutch websites in coordinated attack

TikTok Slammed With €530 Million GDPR Fine for Sending E.U. Data to China

Malicious PyPI packages abuse Gmail, websockets to hijack systems

Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks

Apple 'AirBorne' flaws can lead to zero-click AirPlay RCE attacks

Nail salon employee pleads guilty after holding 13 remote IT jobs worked by developers in China

Google: 97 zero-days exploited in 2024, over 50% in spyware attacks

Samsung admits to security wormhole in some Galaxy devices

DragonForce expands ransomware model with white-label branding scheme

Baltimore City Public Schools data breach affects over 31,000 people

Craft CMS RCE exploit chain used in zero-day attacks to steal data

ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion

Lazarus hackers breach six companies in watering hole attacks

North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito

Lotus Panda Hacks SE Asian Governments With Browser Stealers and Sideloaded Malware

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures

Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader

Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT