All posts by John Doe

■■■□□ Cyber-Fraud on Indian politician. Janasena MLA loses Rs 12 lakh in fake RTA challan cyber fraud. C Balaraju lost Rs 12 lakh in a cyber fraud after clicking a malicious APK link posing as an RTA challan. Andhra Pradesh Police registered a case and launched a probe into suspected organised gang involvement. Janasena MLA…

⚠️ Dark Sword 🗡️ hacker group is explore Apple iOS Zero-Day exploit to takeover device with a link click. The exploit chain used 6 Zero-Day vulnerabilities. Software patch has been released. https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain

■■□□□ Ongoing cyber activity. Explained.

■■■□□ Cyber-Fraud on Indian politician. Janasena MLA loses Rs 12 lakh in fake RTA challan cyber fraud. C Balaraju lost Rs 12 lakh in a cyber fraud after clicking a malicious APK link posing as an RTA challan. Andhra Pradesh Police registered a case and launched a probe into suspected organised gang involvement. Janasena MLA…

■■■■□ LMR: A technique where attackers break down malicious code into smaller components and reassemble them at runtime inside the browser. This attack bypasses network security entirely. Malware arrives in fragments that look benign to traditional scanners, then gets reassembled and executed in the browser rendering engine where most security tools have zero visibility. 𝗟𝗮𝘀𝘁…

 Trivy vulnerability scanner breach pushed infostealer via GitHub Actions The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed credential-stealing malware through official releases and GitHub Actions. […] https://www.bleepingcomputer.com/news/security/trivy-vulnerability-scanner-breach-pushed-infostealer-via-github-actions/

■■■■□ Hacktivist group having the Israeli websites. In their message verbatim: https://cyber.org.il/ https://check-host.net/check-report/3c340f8akbc9 Cyber.org.il is the website for the Cyber Education Center (CEC), an Israeli initiative funded by the Rashi Foundation. It focuses on advancing cyber education, promoting gender equality in technology through initiatives like CyberGirlz, and preparing the next generation for technological leadership. #RuskiNet…

■■□□□ I Rebuilt a Real North Korean Malware Attack in My Lab — Here’s Everything. https://medium.com/@writer.blog03/i-rebuilt-a-real-north-korean-malware-attack-in-my-lab-heres-everything-49923f264af6

■■■□□ SILENTCHAIN AI: AI-Powered Passive Vulnerability Analysis for Burp Suite. https://github.com/silentchainai/SILENTCHAIN

A rogue AI led to a serious security incident at Meta Article, Comments