Hack Reports - Latest Cybersecurity News, Trends & Updates

Sign in Subscribe

Malware and Ransomware

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

WordPress Credit Card Skimmer Malware A recent and significant threat in the cybersecurity landscape is the emergence of a new breed of credit card skimming malware targeting WordPress checkout pages. * Malware Details: This malware has been identified by Natalie Silvanovich, a security researcher at Google’s Project Zero team. It

Fake CrowdStrike Recruiters Distribute Malware Via Phishing Emails

Fake CrowdStrike Recruiters Distribute Malware Via Phishing Emails

CrowdStrike Phishing Scam Analysis: Cryptominer Malware via Fake Job Offers A recent phishing campaign has been identified where cybercriminals are impersonating CrowdStrike recruiters to distribute cryptominer malware, specifically the XMRig miner. Here is a detailed analysis of the scam: Phishing Campaign Mechanics * The campaign begins with a phishing email that

Fake PoC Exploit Targets Cybersecurity Researchers with Malware

Fake PoC Exploit Targets Cybersecurity Researchers with Malware

Latest News on Fake PoC Exploit Malware and Windows LDAP Service Vulnerability Fake PoC Exploit Malware Targeting Cybersecurity Researchers In a recent and alarming development, cybersecurity researchers are being targeted by cybercriminals using fake proof-of-concept (PoC) exploit code. Here are the key points: * Method of Attack: Cybercriminals are publishing fake

Muddling Meerkat Linked to Domain Spoofing in Global Spam Scams

Muddling Meerkat Linked to Domain Spoofing in Global Spam Scams

Latest News on Domain Spoofing and Malspam Campaigns 2025 Domain Spoofing and Malspam Campaigns In recent weeks, cybersecurity researchers have identified several sophisticated malspam campaigns that continue to exploit domain spoofing techniques to bypass email security measures. Abuse of Disused Domains Attackers are increasingly using neglected or disused domains that

US charges operators of cryptomixers linked to ransomware gangs

US charges operators of cryptomixers linked to ransomware gangs

Latest News on Cryptomixers and Ransomware Gang Charges US Law Enforcement Crackdown on Cryptomixers In a significant development, US law enforcement has taken action against individuals involved in operating cryptocurrency mixing services, which are often used to launder illicit funds, including those obtained through ransomware and other cybercrimes. * Indictment of

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics

FunkSec Ransomware: AI Tactics and Analysis Emergence and Operations FunkSec, a newly identified ransomware group, emerged in late 2024 and has already claimed more than 85 victims, primarily in the U.S., India, Italy, Brazil, Israel, Spain, and Mongolia. This group is notable for its use of artificial intelligence (AI)

RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns

RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns

RedDelta and PlugX Malware Espionage Overview RedDelta is identified as a Chinese state-sponsored group that has been actively engaged in cyber espionage operations, particularly targeting countries in Southeast Asia, Mongolia, and Taiwan. Recent Activities Between July 2023 and December 2024, RedDelta targeted Mongolia, Taiwan, Myanmar, Vietnam, and Cambodia using advanced