#Russia-linked #APT28 use #Signal chats to target Ukraine official with #malware
https://securityaffairs.com/179288/apt/russia-linked-apt28-use-signal-chats-to-target-ukraine-official-with-malware.html
#securityaffairs #hacking

'Stargazers' use fake Minecraft Mods to steal Player Passwords.

The campaign [discovered by Check Point Research], is conducted by the Stargazers Ghost Network and leverages the Minecraft massive modding ecosystem and legitimate services like GitHub to reach a large audience of potential targets.

https://research.checkpoint.com/2025/minecraft-mod-malware-stargazers/

New Malware Campaign Targets MySQL Servers with RAT Payloads

A recent campaign has targeted MySQL servers, where attackers are exploiting User Defined Functions (UDFs) to gain persistent access and deploy multiple types of malware.

Pulse ID: 685a59bd8dd1d56505c728c5
Pulse Link: https://otx.alienvault.com/pulse/685a59bd8dd1d56505c728c5
Pulse Author: cryptocti
Created: 2025-06-24 07:54:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Fake Minecraft Mods on GitHub Found Stealing Player Data – Source:hackread.com https://ciso2ciso.com/fake-minecraft-mods-on-github-found-stealing-player-data-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #CyberAttack #Minecraft #Hackread #security #malware #gaming #Fraud #MODS #Scam

Fake Minecraft Mods on GitHub Found Stealing Player Data https://hackread.com/fake-minecraft-mods-github-found-stealing-player-data/ #Cybersecurity #Vulnerability #CyberAttack #Minecraft #Security #security #Malware #Gaming #gaming #Fraud #MODS #Scam

The fact that #NSAbook is literally developing #Govware to track users and bypass #Android #sandbox as well as #tracking them regardless of #VPN, #Cookies or #IncognitoMode use or blockage.

https://www.youtube.com/watch?v=LUtctMShGJw via @BrodieOnLinux

More to readup upon.
https://redact.dev/blog/meta-yandex-localhost-tracking
https://www.zeropartydata.es/p/localhost-tracking-explained-it-could

Fake #Minecraft Mods found on GitHub are stealing player data, including passwords and crypto wallets. Over 1,500 devices may be infected, warn researchers.

https://hackread.com/fake-minecraft-mods-github-found-stealing-player-data/

Latest issue of my curated #cybersecurity and #infosec list of resources for week #25/2025 is out!

It includes the following and much more:

The Washington Post experienced a #cyberattack that compromised the email accounts of several journalists;

The U.K. watchdog fined #23andMe £2.31 million;

#UBS Confirms Data Stolen After Hack at External Supplier;

Over 1,500 #Minecraft players have been infected by a new Java #malware;

Researchers say #AI hacking tools sold online were powered by #Grok, #Mixtral;

Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end

https://infosec-mashup.santolaria.net/p/infosec-mashup-25-2025

Okay. computer novice here with hopes of advice.

Are we all supposed to be using a protection subscription like McAfee, bitdefender, Norton, Total AV, etc., ALONG WITH something like Malwarebytes, etc.; or, is one or the other all we need? I have no clue anymore as to all, some, one of the services I'm supposed to use for my little world here.

How many different computer protection services am I supposed to keep up to date?

#Help #Computer
#malware #hacking
#protection #IT #software

DuckDuckGo’s Scam Blocker now protects against fake crypto sites, scareware, phishing, and malware—without tracking your data .

It’s built into their browser with regular updates from independent firm Netcraft .

Privacy Pro subscribers get full-device protection via VPN .

@duckduckgo

https://spreadprivacy.com/scam-blocker/

#WordPress #hackers are teaming up with commercial #adtech firms to distribute #malware to millions of users - here's how to stay safe

https://www.techradar.com/pro/security/wordpress-hackers-are-teaming-up-with-commercial-adtech-firms-to-distribute-malware-to-millions-of-users-heres-how-to-stay-safe

Stealthy GitHub Malware Campaign Targets Devs

A new campaign exploiting GitHub to distribute malicious Python code disguised as legitimate hacking tools has been uncovered. The operation, attributed to the group known as Banana Squad, used 67 repositories hosting trojanized files that mimicked benign open-source projects. The attackers exploited GitHub's interface to conceal backdoor code using long space strings, making the malicious content invisible in normal view. Each GitHub account typically hosted one repository, likely fake and created solely to deliver malicious content. Hidden code within the Python files used encoding methods to obscure payload delivery functions. The campaign reflects a shift in open-source software supply chain attacks, with attackers now leveraging more covert tactics to target platforms like GitHub. Developers are advised to verify repositories, avoid reliance on single-repository accounts, and monitor for suspicious domains.

Pulse ID: 68548f8be824569a83f26ef4
Pulse Link: https://otx.alienvault.com/pulse/68548f8be824569a83f26ef4
Pulse Author: AlienVault
Created: 2025-06-19 22:30:35

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Analysis of a Malicious WordPress Plugin: The Covert Redirector

A malicious WordPress plugin named 'wordpress-player.php' has been discovered, affecting at least 26 websites. The plugin injects a hidden HTML5 video player and establishes a WebSocket connection to a command and control server. It redirects visitors to suspicious websites after 4-5 seconds, avoiding execution for logged-in users. The malware uses a fake 'WordPress Core' author name to evade detection. It impacts website integrity through unauthorized redirects, SEO degradation, and potential security risks to visitors. Mitigation steps include thorough scanning, malware removal, credential resets, software updates, and implementing a Web Application Firewall.

Pulse ID: 68536e4f88b62f5f7d8c4865
Pulse Link: https://otx.alienvault.com/pulse/68536e4f88b62f5f7d8c4865
Pulse Author: AlienVault
Created: 2025-06-19 01:56:31

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Inside the BlueNoroff Web3 macOS Intrusion Analysis

A detailed analysis of a sophisticated intrusion targeting a cryptocurrency foundation employee is presented. The attack, attributed to the North Korean APT group BlueNoroff, began with a social engineering lure via Telegram, leading to the installation of malicious software disguised as a Zoom extension. The intrusion involved multiple stages of malware deployment, including persistent implants, backdoors, keyloggers, and cryptocurrency stealers. The attackers utilized advanced techniques such as process injection on macOS and leveraged various tools to collect sensitive information, particularly focusing on cryptocurrency-related data. The analysis covers the initial access vector, technical details of the malware components, and their functionalities, providing insights into the evolving tactics of state-sponsored threat actors targeting macOS systems.

Pulse ID: 6853be742df9d3db90e41219
Pulse Link: https://otx.alienvault.com/pulse/6853be742df9d3db90e41219
Pulse Author: AlienVault
Created: 2025-06-19 07:38:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

FBI schlägt Alarm: Diese Router solltet ihr nicht mehr nutzen - t3n – digital pioneers
https://t3n.de/news/fbi-schlaegt-alarm-diese-router-solltet-ihr-nicht-mehr-nutzen-1686781/
#Cybercrime #Router #Malware #Botnetz

North Korean hackers #deepfake execs in #Zoom call to spread #Mac #malware

https://www.bleepingcomputer.com/news/security/north-korean-hackers-deepfake-execs-in-zoom-call-to-spread-mac-malware/