Malicious actors are abusing Go’s open-source ecosystem by deploying a backdoored crypto module that steals passwords and installs a Rekoobe Linux backdoor on developer and CI environments. The package imitates Go’s trusted cryptography library to turn ordinary password prompts into a full compromise chain quietly. On pkg.go.dev it appears as a normal cryptography library with […]

The post Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor in Developer Environments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The cybersecurity community is witnessing a rise in credential‑stuffing attacks targeting corporate Single Sign‑On (SSO) systems, with recent campaigns focusing on F5 BIG‑IP devices. To understand the source of the stolen logins, Defused Cyber analyzed a dataset of 70 unique email‑password pairs used in the attack. When cross‑referenced with Hudson Rock’s cybercrime database of Infostealer […]

The post Infostealers Drive Massive Brute-Force Attacks on Corporate SSO Gateways with Stolen Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A Go‑based remote administration tool known as Vshell is emerging as a favored alternative to Cobalt Strike among both red teams and threat actors. Though marketed as a legitimate network administration and security testing platform, recent analyses indicate that Vshell’s powerful post‑compromise capabilities are increasingly used in unauthorized operations. Developed as a cross‑platform command‑and‑control (C2) framework, Vshell […]

The post Vshell Gains Popularity Among Cybercriminals as Cobalt Strike Alternative appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.