A financially motivated campaign dubbed “Payroll Pirate” has emerged using advanced phishing and adversary-in-the-middle (AiTM) session hijacking to bypass multifactor authentication (MFA) and reroute payroll disbursements. This operation targets payroll and HR portals at mid-market and enterprise organizations, chaining credential theft, real-time session interception, and subtle profile changes to siphon funds without triggering conventional alarms. […]

The post Payroll Pirate Campaign Uses AiTM Session Hijacking to Bypass MFA and Redirect Salaries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A long-running, highly disciplined intrusion attributed to the China-nexus actor known as Velvet Ant has been revealed as a near-decade campaign of silent access that culminated in the replacement of core authentication components OpenSSH binaries and PAM modules across a segregated critical-infrastructure network. The intrusion chain began with compromises of internet-facing systems where the operator […]

The post Velvet Ant Hackers Backdoor OpenSSH and PAM to Spy on Critical Infrastructure Network appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.