All posts tagged cyber

■■■□□ Europol warns 443 online shops infected with credit card stealers. https://www.bleepingcomputer.com/news/security/europol-warns-443-online-shops-infected-with-credit-card-stealers/ https://t.me/cKure/13389

■■■■□ PEnetration TEsting Proxy: open-source Java application for traffic analysis & modification. https://securityonline.info/penetration-testing-proxy-open-source-java-application-for-traffic-analysis-modification/ https://t.me/cKure/13388

■■■■□ United States’ water utilities were hacked after leaving their default passwords set to ‘1111’. The White House is sounding the alarm as critical U.S. infrastructure fails to implement even the most basic cybersecurity measures. https://www.fastcompany.com/91002831/us-water-utilities-hacked-cybersecurity https://t.me/cKure/13387

■■■□□ Privacy: Hacked security cam footage from bedrooms, dressing rooms, spas found to be on sale on Telegram group. https://www.notebookcheck.net/Hacked-security-cam-footage-from-bedrooms-dressing-rooms-spas-found-to-be-on-sale-on-Telegram-group.786160.0.html https://t.me/cKure/13386

■■■■□ ‘Wall of Flippers’ detects Flipper Zero Bluetooth spam attacks. https://www.bleepingcomputer.com/news/security/wall-of-flippers-detects-flipper-zero-bluetooth-spam-attacks/ https://t.me/cKure/13385

Exploring Hell’s Gate. Hell’s Gate makes it possible to execute direct syscalls based on dynamically retrieving the required SSNs via a combination of walking the Process Environment Block (PEB), parsing the Export Address Table (EAT) from ntdll.dll, opcode comparison from the syscall stub of the native functions and extracting the SSNs. https://redops.at/en/blog/exploring-hells-gate https://t.me/cKure/13383

■■■■□ Teenage Grand Theft Auto 6 hacker given an indefinite sentence in a secure hospital due to his ‘intent to return to cybercrime as soon as possible’. https://www.pcgamer.com/teenage-grand-theft-auto-6-hacker-given-an-indefinite-sentence-in-a-secure-hospital-due-to-his-intent-to-return-to-cybercrime-as-soon-as-possible/ https://t.me/cKure/13381

■■■■□ Hackers Prompt Emergency Google Zero-Day Attack Patch For Chrome Users. https://www.forbes.com/sites/daveywinder/2023/12/21/hackers-prompt-emergency-google-0-day-attack-patch-for-chrome-users/ https://t.me/cKure/13380

■■■□□ Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication. Cybersecurity researchers have discovered an updated version of an Android banking malware called Chameleon that has expanded its targeting to include users in the U.K. and Italy. https://thehackernews.com/2023/12/new-chameleon-android-banking-trojan.html https://t.me/cKure/13379

■■□□□ Troll-A: A command line tool for extracting secrets such as passwords, API keys, and tokens from WARC (Web ARChive) files. Troll-A is an easy-to-use, comprehensive, and fast solution for finding secrets in the web archive. https://github.com/crissyfield/troll-a https://t.me/cKure/13378