GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware.

·

Blockchain, Cyber Attack, Cyber Crime, cybersecurity, Florida, GraphAlgo, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign

UNC6783 hackers and extortionists impersonate support staff, using fake Okta login pages and social engineering to access corporate systems and steal sensitive data.

·

Austin Larsen, BPO, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Extortion, Google, Okta, SCAM, Scams and Fraud, Security, UNC6783

¶¶¶¶¶

Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs

An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available.

·

0day, adobe, Adobe Reader, Cyber Attack, cybersecurity, EXPMON, Haifei Li, PDF, Security, vulnerability

¶¶¶¶¶

Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks

LayerX researchers have discovered how to bypass Claude Code’s safety rules using the CLAUDE.md file. This exploit allows…

·

AI, Anthropic, Artificial Intelligence, Claude, Claude AI, Claude Code, cybersecurity, LayerX, Security, vulnerability

¶¶¶¶¶

New macOS Malware notnullOSX Targets Crypto Wallets Over $10K

macOS Malware notnullOSX targets crypto wallets over $10K, using fake apps, Terminal tricks, and backdoors to steal funds and sensitive data.

·

Crypto, Cyber Crime, cybersecurity, Malware, notnullOSX, Security, Spain, Taiwan, Vietnam

¶¶¶¶¶

Operation Masquerade: FBI Disrupts Russian Router Hacking Campaign

Operation Masquerade: The FBI and DoJ disrupted a Russian GRU campaign that hijacked routers via DNS attacks to spy on users and steal credentials.

·

APT28, Cyber Crime, cybersecurity, Fancy Bear, FBI, Forest Blizzard, hacking, Operation Masquerade, Router, Russia, Security, Spying

¶¶¶¶¶

Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure

Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Medusa, Microsoft, Ransomware, Security, Storm-1175, vulnerability

¶¶¶¶¶

Russian Forest Blizzard Hackers Hijack Home Routers for Global Spying

Microsoft Threat Intelligence reveals how Russian hacking group Forest Blizzard uses home routers for DNS hijacking and spying.

·

Cyber Attack, cybersecurity, Fancy Bear, Forest Blizzard, Hacking News, Routers, Russia, Security, SOHO, Storm-2754, Surveillance, vulnerability

¶¶¶¶¶

New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto

Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows.

·

ClickFix, Crypto, Cyber Attack, cybersecurity, Malware, Node.js, RAT, Scams and Fraud, Security, Tor, Windows

¶¶¶¶¶

Hackers Pose as Non-Profit Developers to Deploy Monero Mining Malware

REF1695 hackers spread Monero mining malware via fake non-profit installers, using stealth tactics to evade detection and hijack systems for profit.

·

Crypto, cybersecurity, Elastic, Elastic Security Labs, Fraud, Malware, Monero, REF1695, SCAM, Security, XMR

¶¶¶¶¶

1010.cx

1010.cx

Category: cybersecurity