Accounts Archives - Ady DeeJay

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

December 24, 2024

by Ady DeeJay

Comments (0)

Dec 24, 2024Ravie LakshmananMalware / Data Exfiltration Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index (PyPI) repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named zebo and cometlogger,

April 1, 2024

by Ady DeeJay

Comments (0)

Telecommunications giant AT&T has confirmed a data breach affecting 73 million accounts. The company’s official press release confirms the AT&T data breach stating several facts and figures about the incident. The AT&T data leak came to light when it was discovered that a substantial number of AT&T passcodes had been

How are sock puppet accounts used in OSINT?

January 11, 2024

by Ady DeeJay

Comments (0)

Business Security How wearing a sock puppet can aid the collection of open source intelligence while insulating the puppeteer from risks 11 Jan 2024 • , 4 min. read In the untold expanse of online information and communication, the ability to find the signal in the noise and discern the

July 1, 2023

by Ady DeeJay

Comments (0)

Jul 01, 2023Ravie LakshmananWebsite Security / Cyber Threat As many as 200,000 WordPress websites are at risk of ongoing attacks exploiting a critical unpatched security vulnerability in the Ultimate Member plugin. The flaw, tracked as CVE-2023-3460 (CVSS score: 9.8), impacts all versions of the Ultimate Member plugin, including the latest

June 29, 2023

by Ady DeeJay

Comments (0)

Jun 29, 2023Ravie LakshmananWebsite Security / Vulnerability A critical security flaw has been disclosed in miniOrange’s Social Login and Register plugin for WordPress that could enable a malicious actor to log in as any user-provided information about email address is already known. Tracked as CVE-2023-2982 (CVSS score: 9.8), the authentication

June 5, 2023

by Ady DeeJay

Comments (0)

Jun 05, 2023Ravie LakshmananBanking Security / Malware An unknown cybercrime threat actor has been observed targeting Spanish- and Portuguese-speaking victims to compromise online banking accounts in Mexico, Peru, and Portugal. “This threat actor employs tactics such as LOLBaS (living-off-the-land binaries and scripts), along with CMD-based scripts to carry out its

May 3, 2023

by Ady DeeJay

Comments (0)

May 03, 2023Ravie LakshmananPassword Security / Authentication Almost five months after Google added support for passkeys to its Chrome browser, the tech giant has begun rolling out the passwordless solution across Google Accounts on all platforms. Passkeys, backed by the FIDO Alliance, are a more secure way to sign in

May 1, 2023

by Ady DeeJay

Comments (0)

May 01, 2023Ravie LakshmananMobile Security / Android Google disclosed that its improved security features and app review processes helped it block 1.43 million bad apps from being published to the Play Store in 2022. In addition, the company said it banned 173,000 bad accounts and fended off over $2 billion

April 11, 2023

by Ady DeeJay

Comments (0)

Apr 11, 2023Ravie LakshmananCloud Security / Data Security A “by-design flaw” uncovered in Microsoft Azure could be exploited by attackers to gain access to storage accounts, move laterally in the environment, and even execute remote code. “It is possible to abuse and leverage Microsoft Storage Accounts by manipulating Azure Functions

March 23, 2023

by Ady DeeJay

Comments (0)

Mar 23, 2023Ravie LakshmananBrowser Security / Artificial Intelligence Google has stepped in to remove a bogus Chrome browser extension from the official Web Store that masqueraded as OpenAI’s ChatGPT service to harvest Facebook session cookies and hijack the accounts. The “ChatGPT For Google” extension, a trojanized version of a legitimate

Cybersecurity Alert For 73M Accounts

How are sock puppet accounts used in OSINT?

Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

Google Blocks 1.43 Million Malicious Apps, Bans 73,000 Bad Accounts in 2022

Newly Discovered “By-Design” Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers

Fake ChatGPT Chrome Browser Extension Caught Hijacking Facebook Accounts

Recent Posts

Recent Comments

Categories

Archives

Recent Posts

Recent Comments

Categories

Archives

Tags