XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells

VeraCore Zero-Day
February 10, 2025
by Ady DeeJay
Comments (0)

Feb 10, 2025Ravie LakshmananVulnerability / Malware Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells, and maintain persistent remote access to compromised systems. The zero-day exploitation of security flaws

Read More

Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities

Turla Exploits Pakistani Hackers
December 4, 2024
by Ady DeeJay
Comments (0)

The Russia-linked advanced persistent threat (APT) group known as Turla has been linked to a previously undocumented campaign that involved infiltrating the command-and-control (C2) servers of a Pakistan-based hacking group named Storm-0156 to conduct its own operations since 2022. The activity, first observed in December 2022, is the latest instance

Read More

Cryptojacking Exploits Misconfigured Kubernetes Clusters

Cryptojacking Exploits Misconfigured Kubernetes Clusters
June 13, 2024
by Ady DeeJay
Comments (0)

Cybersecurity researchers have identified an ongoing cryptojacking campaign targeting misconfigured Kubernetes clusters to mine Dero cryptocurrency. Cloud security firm Wiz has uncovered this activity, describing it as an updated variant of a financially motivated operation first reported by CrowdStrike in March 2023. via GIPHY “In this incident, the threat actor

Read More

Gitloker Exploits GitHub Notifications to Hijack Repos

Gitloker Exploits GitHub Notifications to Hijack Repos
June 11, 2024
by Ady DeeJay
Comments (0)

Threat actors are impersonating GitHub’s security and recruitment teams in phishing attacks designed to hijack repositories through malicious OAuth apps. This ongoing extortion campaign has been wiping compromised repositories. Since February, dozens of developers have received deceptive job offers or security alert emails from “[email protected].” These emails were sent after

Read More

Muhstik Botnet Exploits Apache RocketMQ Flaw for DDoS Attack

Muhstik Botnet Exploits Apache RocketMQ Flaw for DDoS Attack
June 7, 2024
by Ady DeeJay
Comments (0)

The Muhstik botnet, known for its distributed denial-of-service (DDoS) attacks, is exploiting a recently patched security vulnerability in Apache RocketMQ to commandeer vulnerable servers and expand its reach.  via GIPHY Aqua, a cloud security firm, reported that Muhstik is notorious for targeting IoT devices and Linux-based servers, infecting them

Read More

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

Barracuda Zero-Day
August 29, 2023
by Ady DeeJay
Comments (0)

A suspected Chinese-nexus hacking group exploited a recently disclosed zero-day flaw in Barracuda Networks Email Security Gateway (ESG) appliances to breach government, military, defense and aerospace, high-tech industry, and telecom sectors as part of a global espionage campaign. Mandiant, which is tracking the activity under the name UNC4841, described the

Read More