malicious JavaScript injection

From Cyber Security News – SocGholish Leveraging Compromised Websites To Deploy RansomHub Ransomware

The cybersecurity landscape has witnessed a concerning development as threat actors behind SocGholish have begun weaponizing compromised websites to distribute the dangerous RansomHub ransomware. This sophisticated attack chain involves multiple…

shaikh Saqib March 17, 2025

News

From Security Week – 100 Car Dealerships Hit by Supply Chain Attack

[[{"value":"The websites of over 100 auto dealerships were found serving malicious ClickFix code in a supply chain compromise. The post 100 Car Dealerships Hit by Supply Chain Attack appeared first…

shaikh Saqib March 17, 2025

News

From The Hacker News – Safe{Wallet} Confirms North Korean TraderTraitor Hackers Stole $1.5 Billion in Bybit Heist

Safe{Wallet} has revealed that the cybersecurity incident that led to the Bybit $1.5 billion crypto heist is a "highly sophisticated, state-sponsored attack," stating the North Korean threat actors behind the hack took steps to erase traces of the malicious activity in an effort to hamper investigation efforts. The multi-signature (multisig) platform, which has roped in Google Cloud Mandiant to

shaikh Saqib March 7, 2025

News

From The Hacker News – Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access

Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed," c/side researcher Himanshu Anand said in a Wednesday analysis. The malicious JavaScript code has been found to be served via cdn.csyndication[

shaikh Saqib March 6, 2025

Vulnerabilities

From Cybersecurity Help – $1.5B Bybit heist linked to a compromised developer machine within Safe{Wallet} infrastructure

The attack was initiated through a targeted injection of malicious JavaScript into the Safe{Wallet} platform’s infrastructure. Read More

shaikh Saqib February 27, 2025

News

From Cyber Security News – Highly Obfuscated .NET sectopRAT Mimic as Chrome Extension

The emergence of a highly obfuscated .NET-based Remote Access Trojan (RAT) known as sectopRAT, disguised as a legitimate Google Chrome extension has been revealed in a recent analysis. This malicious…

shaikh Saqib February 19, 2025

Vulnerabilities

From Cybersecurity Help – Threat actors target IIS servers in Asia to spread BadIIS malware

The attackers appear to be manipulating SEO tactics to deploy the malware. Read More

shaikh Saqib February 10, 2025

News

From Cyber Security News – Hackers Exploiting Google Tag Manager To Steal Credit Card From eCommerce Sites

Hackers have been exploiting Google Tag Manager (GTM) to steal sensitive credit card information from eCommerce sites, particularly those built on the Magento platform. This sophisticated attack shows the evolving…

shaikh Saqib February 10, 2025