What is Smishing and How to Defend Against it?
Smishing meaning and definition Smishing is a phishing cybersecurity attack carried out over mobile text messaging, also known as SMS phishing. As a variant of phishing, victims are deceived into…
Ongoing ‘Roaming Mantis’ Smishing Campaign Hits Over 70,000 Users in France
A Chinese threat actor named Roaming Mantis has been targeting Android users in France with the MoqHao malware in a new smishing campaign, security researchers with Sekoia warn. The campaign…
Brand-New HavanaCrypt Ransomware Poses as Google Software Update App, Uses Microsoft Hosting Service IP Address as C&C Server
A new ransomware family dubbed ‘HavanaCrypt’ disguises itself as a Google software update app, using a Microsoft web hosting service IP address as its command and control server to circumvent…
Lithuanian Energy Firm Disrupted by DDoS Attack
Lithuanian energy company Ignitis Group was hit by what it described as its “biggest cyber-attack in a decade” on Saturday when numerous distributed denial of service (DDoS) attacks were aimed…
Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads
The Russian state-sponsored hacking collective APT29 has been attributed to a new phishing campaign that uses legitimate cloud services like Google Drive and Dropbox to deliver malicious payloads on compromised…
Why is everyone getting hacked on Facebook?
Social media scams are just one of the many ways cybercriminals are taking advantage of people online these days. If your social media networks are anything like mine, you’ve noticed…
China lured graduate jobseekers into digital espionage
Chinese university students have been lured to work at a secretive technology company that masked the true nature of their jobs: researching Western targets for spying and translating hacked documents…
TryHackMe : RootMe CTF Writeup (Detailed)
1. Reconnaissance 2. Popping a reverse shell !!! 2.1. Making the connection 3. Reading user flag 4. Privilege Escalation 4.1. Hunting for SUID binaries 4.2. Getting root shell and reading…
Hacker Steals Database of Hundreds of Verizon Employees
The database contains information that could be used in social engineering and SIM swapping attacks. A hacker has obtained a database including hundreds of Verizon employees’ full names, email addresses,…
FBI: Compromised US academic credentials available on various cybercrime forums
The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. The FBI issued an alert to…