Hackers deploying Telegram bot to steal troves of data from WooCommerce websites have been found. These malicious adversaries used credit card skimmers, leading to several cases of credit card theft reported on an eCommerce site. The first scenario is that a website owner received numerous complaints from customers who reported faulty transactions on their cards...Continue Reading
The Russian FSB has allegedly procured a sophisticated botnet that can launch harmful DDoS attacks and manipulate trending social media topics across all platforms. These findings are from a report following security experts’ analysis of documents stolen from a Russian government contractor previously victimised by the ‘Digital Revolution’ hacktivist group in March 2020. From the...Continue Reading
Verified user accounts on Twitter are warned about an ongoing phishing campaign which aims to steal account credentials. Those verified users on Twitter have a blue checkmark or badge beside their names, indicating their status as celebrities, politicians, and other figures representing their distinction. All verified users must submit a list of their information for...Continue Reading
Facebook users and page admins are warned of an ongoing phishing attack where threat actors attempt to steal their account passwords. In the campaign, the attack operators send a phishing email to their victims, impersonating the Facebook team and informing the user about their accounts or pages being disabled due to violating some terms of...Continue Reading
Some academic researchers reported and warned that the Webex video-conferencing application owned by Cisco, and others, still monitor users’ microphone devices even if they have muted it from their end. The researchers also added that the telemetry data that the application transmits to user servers could be used to identify background activities happening from the...Continue Reading
Meta reveals disrupting the malicious operations of numerous Russian and Belarusian threat actors that targeted Ukraine via espionage campaigns in the past two months. The campaign is reported to have originated from government-linked groups in Russia and Belarus that actively launches cyber espionage operations against many sectors in Ukraine. According to Meta, they have eliminated...Continue Reading
Users of Telegram accounts are not safe anymore after Ukraine’s technical security and intelligence service released a warning that a new wave of cyberattacks is targeting them using malicious links. These malicious links are sent to Telegram recipients via a fake warning that a login attempt had been detected from a device in Russia and...Continue Reading
According to Meta, formerly known as Facebook, they have detected and blocked two simulated disinformation attacks about the current geopolitical crisis between Russia and Ukraine. Meta confirmed that cybercriminal groups in Russia and Ukraine are behind the fake news campaigns that target Ukrainians. Based on a post of Meta’s head of security, they have already...Continue Reading
The operators of Raccoon Stealer are discovered abusing Telegram to store and update C2 addresses and distribute the infostealer to compromised devices. The stealer has included the function that updates its C2 addresses on the chat app. Based on reports, the latest version of Raccoon Stealer communicates with its command-and-control (C2) server by utilising Telegram....Continue Reading
An SEO poisoning malware called Electron Bot has been hacking social media accounts, including SoundCloud, Facebook, and Google, by impersonating games found in the Microsoft Store like Subway Surfer and Temple Run. Researchers noted that the bot also allows the threat actors to control the compromised devices. Based on the analysis, Electron Bot can be...Continue Reading
