U.S. Treasury sanctions two individuals and four entities linked to North Korean IT workers who generate illegal revenue for the regime's weapons programs. These workers operate globally under false identities, with up to 90% of their earnings funding North Korea's military initiatives. Th...
Cloud-based hotel management platform Otelier suffered a major data breach affecting 10,000+ hotels, including Marriott, Hilton, and Hyatt. Attackers stole 8TB of data containing 39 million reservation records and 212 million user records through compromised credentials. While no financial...
Russian hacking group Star Blizzard has launched a new spear-phishing campaign targeting WhatsApp accounts of government officials, defense experts, and Ukraine-supporting organizations. The group uses sophisticated QR code deception and fake websites to gain unauthorized access to victims...
Two sophisticated malware campaigns discovered by HP Wolf Security use steganography to hide malicious code in Archive.org-hosted images. The attacks, deploying VIP Keylogger and 0bj3ctivity Stealer, begin with phishing emails and exploit CVE-2017-11882 to steal sensitive data. The campaig...
A sophisticated phishing campaign targeting Google Ads users has emerged, using malicious advertisements to steal advertiser credentials. The attackers create fake Google Ads that redirect to phishing sites hosted on Google Sites, capturing login credentials and 2FA codes. Once compromised...
