The Hacker News
π Running an unpatched Windows system? Youβre a target. Hackers are exploiting CVE-2025-26633: EncryptHub hijacks Windows MMC with a stealthy .msc file swap via MUIPath, loading malware like Rhadamanthys and StealC through a fake βen-USβ folder. π§ͺ Trendβ¦
suuuuuupππ
Hereβs a banger for you: "MSC EvilTwin"! Ready for some Windows magic?
This oneβs all abt exploiting Microsoft Management Console (MMC). The bad guys figured out how to trick it into running malicious payloads without you knowing! π±
Fake MSI + evil MSC file = Payload runs silently when MMC is opened. No user input needed, and Stealthy ASF right ? and also it's real deal π
Patch Alert: CVE-2025-26633 (7.0 CVSS) patched recently in Patch Tuesday update
UPDATE NOW! β οΈ
#MSC_EvilTwin
@AfroSec
Hereβs a banger for you: "MSC EvilTwin"! Ready for some Windows magic?
This oneβs all abt exploiting Microsoft Management Console (MMC). The bad guys figured out how to trick it into running malicious payloads without you knowing! π±
Fake MSI + evil MSC file = Payload runs silently when MMC is opened. No user input needed, and Stealthy ASF right ? and also it's real deal π
Patch Alert: CVE-2025-26633 (7.0 CVSS) patched recently in Patch Tuesday update
UPDATE NOW! β οΈ
#MSC_EvilTwin
@AfroSec
π₯3β€1β‘1π₯°1π1
AfroSec
suuuuuupππ Hereβs a banger for you: "MSC EvilTwin"! Ready for some Windows magic? This oneβs all abt exploiting Microsoft Management Console (MMC). The bad guys figured out how to trick it into running malicious payloads without you knowing! π± Fake MSIβ¦
α₯α΅αͺ windows users α°α₯α°α₯ α α α₯α α₯ααα
α΅ α αα΅ αα ππ
@AfroSec
@AfroSec
π8π€£3
The Hacker News
π Hackers can now hijack solar power systems. 46 new bugs found in inverters from Sungrow, Growatt, and SMA. Attackers could shut down power, cause blackouts, or remotely control devices like a botnet. π¬ One trick? Reset accounts to default password: 123456β¦
this is what we call it > "α α α²α΅ ααα ααα¨αα " ππ
there is no place that we hackers can't get ( exception : heaven π)
@AfroSec
there is no place that we hackers can't get ( exception : heaven π)
@AfroSec
π8π₯2π€£2
Recently, a friend from the channel approached me and asked for a comprehensive roadmap to get started in cybersecurity, so I came up with this simple and easy-to-follow map. ππ
I was soooo lost back then coz I didnβt know where to start. all I did was watch some random Indian dude on Udemy doing black hat stuff ππβlike DDoS and things like that. I was just sitting there like, "Beka, is this hacking?" I had no clue what the dude was doing. ππ (Funny when I think about that phase fr.)
then someone told me to start with networking, so I did.
I wrote this because I know someone in this channel prolly wants to get started, so this message is for them.
And as I told you guys, Iβm still learning. This is just my short-term experience. There have been a lot of ups and downs, but I never stopped. I even lost a lot along the way for this passion. So yeah, Iβm an enthusiast, not a cyber wizard that's all I wanna say. ππ
Just hustle at any damn cost, donβt stop. Time will pay for your struggle. ππ
@AfroSec
I was soooo lost back then coz I didnβt know where to start. all I did was watch some random Indian dude on Udemy doing black hat stuff ππβlike DDoS and things like that. I was just sitting there like, "Beka, is this hacking?" I had no clue what the dude was doing. ππ (Funny when I think about that phase fr.)
then someone told me to start with networking, so I did.
I wrote this because I know someone in this channel prolly wants to get started, so this message is for them.
And as I told you guys, Iβm still learning. This is just my short-term experience. There have been a lot of ups and downs, but I never stopped. I even lost a lot along the way for this passion. So yeah, Iβm an enthusiast, not a cyber wizard that's all I wanna say. ππ
Just hustle at any damn cost, donβt stop. Time will pay for your struggle. ππ
@AfroSec
π₯9β‘1β€βπ₯1π―1
Forwarded from πΊπππππππ π©ππ
And check out the website roadmap.sh they have a great roadmap
π2β‘1
AASTU CSC
Live Cybersecurity Awareness Session Dive into cybersecurity fundamentals, explore different fields, and join a Live OSINT CTF Walkthrough. π
Saturday | 8:30 β 10:00 PM π Online | @AASTU_CyberClub Don't miss out! Linkedin |X | TikTok @AASTU_CyberClub
Checking the slides to make sure I didnβt miss anything for our very first live session today π
btw u can join us : @aastu_cyberclub
@AfroSec
btw u can join us : @aastu_cyberclub
@AfroSec
π«‘3β‘1π₯1πΎ1
AfroSec
Huge thanks to everyone who joined us π @AfroSec
and for the question submission part we are very sorry we will improve this in next session
see you guys next week π«‘π«‘
and one last thing
(EID MUBARAK )β¨β¨β¨β¨β¨β¨β¨β¨β¨β¨β¨β¨ ππππ
@AfroSec
see you guys next week π«‘π«‘
and one last thing
(EID MUBARAK )β¨β¨β¨β¨β¨β¨β¨β¨β¨β¨β¨β¨ ππππ
@AfroSec
π₯4β‘3
This media is not supported in your browser
VIEW IN TELEGRAM
have a blessed Sunday y'all β€οΈβ€οΈ
@AfroSec
@AfroSec
β€14π2π€1
Ohh, by the way, todayβs my birthday! π
First and foremost, I want to thank God for everything He has done in my life. He has given me everything I need and want, and He just worked a miracle for me i canβt express how thankful I amππ
To all my fellow hackers, learners, and hustlers Thank you for being part of this journey. Letβs keep pushing forward together π
@AfroSec
First and foremost, I want to thank God for everything He has done in my life. He has given me everything I need and want, and He just worked a miracle for me i canβt express how thankful I amππ
To all my fellow hackers, learners, and hustlers Thank you for being part of this journey. Letβs keep pushing forward together π
@AfroSec
πΎ20π11β€βπ₯1β‘1
files
Wifi penetration testing from scratch credit : @BugSec @Afr0Files @AfroSec
This media is not supported in your browser
VIEW IN TELEGRAM
β€4π€2
The Hacker News
π North Korean hackers are hunting developersβright now. New malware-laced npm packages (5,600+ downloads) are spreading BeaverTail and a new RAT loader, hidden as fake utilities. π Targets? Your code. Your system. Your data. Read: https://thehackernewβ¦
this means all the programs they built using this package manager is already compromised from the start, Itβs like a sneaky backdoor just waiting to be used for a bigger attack later
imagine like if the developer made site or whatever we call it product for bank or crypto sites using this package manager
then the attacker be like : ππ
Stay updated, devs ππ
@AfroSec
imagine like if the developer made site or whatever we call it product for bank or crypto sites using this package manager
then the attacker be like : ππ
Stay updated, devs ππ
@AfroSec
π3β‘1