All posts in Uncategorized

■■□□□ Data-Leak: Significant Data Breach in Indonesia as Hacker Claims to Sell 137GB of Government Data. A hacker, reportedly a member of the Hellcat ransomware group and an Initial Access Broker, claims to have breached the e-Finance system of Blora Regency (Indonesia) and is attempting to sell 137GB of sensitive data from 2018 to now.…

■■■■□ RCE Vulnerability in 1,000,000 WordPress Sites Lets Attackers Gain Control Over Backend. https://cybersecuritynews.com/wordpress-sites-vulnerable-to-critical-rce/ https://t.me/cKure/15051

■■□□□ Hackers Leverage Red Team Tools in RDP Attacks Via TOR & VPN for Data Exfiltration. https://cybersecuritynews.com/hackers-leverage-red-team-tools-in-rdp-attacks/ https://t.me/cKure/15050

■■■□□ WebSift: An Open-Source OSINT Tool for Web-Based Threat Hunting. https://darkwebinformer.com/websift-an-open-source-osint-tool-for-web-based-threat-hunting/ https://github.com/s-r-e-e-r-a-j/WebSift https://t.me/cKure/15049

■■■■□ Arrest of the Tao China Gang Used a fake SMS machine (False Base Station) to send almost a million messages. https://youtu.be/LELn9cpMvs4 https://t.me/cKure/15048

■■■□□ Kaspersky Lab uncovers a new Lazarus APT complex attack chain aimed at 2 employees of an unnamed nuclear-related organization. https://securelist.com/lazarus-new-malware/115059/ https://t.me/cKure/15047

■■■■□ Cyber-Crime: PayPal scamming users via their Honey Add-On fraud. https://youtu.be/vc4yL3YTwWk https://t.me/cKure/15043

■■■□□ $7,000 Critical Vulnerability: IDOR to BAC to Account Takeover. https://medium.com/meetcyber/how-i-discovered-a-7-000-critical-vulnerability-idor-to-bac-to-account-takeover-0c195eae2ed2 https://t.me/cKure/15042

LockBit Ransomware Developer Arrested in Israel. Dual Russian-Israeli national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit’s RaaS activities, dating back to the ransomware gang’s origins. https://www.darkreading.com/cyberattacks-data-breaches/lockbit-ransomware-developer-arrested-israel. https://t.me/cKure/15040

■■■■□ Pegasus spyware maker NSO Group is liable for attacks on 1,400 WhatsApp users. https://www.theverge.com/2024/12/20/24326342/meta-whatsapp-nso-group-pegasus-spyware-hack-liable https://t.me/cKure/15039