Dark Reading: Attacks/Breaches
How Development Teams Should Respond to Text4Shell

Yet another *4Shell exploit highlights the horror of strange visitors into enterprise environments. This Tech Tip focuses on what to do next.

Dark Reading: Attacks/Breaches
Why Africa's Telecoms Must Actively Collaborate to Combat Fraud

Unique conditions contribute to outsized telecom fraud across the continent, but working together can bring solutions.

hacking: security in practice
Google Chrome Extension, VenomSoftX Steals Cryptocurrency, Passwords

https://external-preview.redd.it/zNkmnnBCD9yRlf_kMoc7XiIvlYtbxehHhy2q-AgbNSg.jpg?width=640&crop=smart&auto=webp&s=452fb332600c3572ed9c5348dd7159ee76bb37b0 submitted by /u/fap_fap_fap_fapper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers breach energy orgs via bugs in discontinued web server

https://cdn-images-1.medium.com/max/602/0*4CIwH0ZYvj2lQl7Y.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
%100 Untraceable PayPal Bank wU Cashapp Venmo transfer blank atm and credit cards 2022 BTC Wallet…

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deploying an AWS S3 static site to use Cloudflare WAF
https://spoofing.medium.com/deploying-an-aws-s3-static-site-to-use-cloudflare-waf-f2211934ca6f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

PrerequisitesContinue reading on Medium » (https://spoofing.medium.com/deploying-an-aws-s3-static-site-to-use-cloudflare-waf-f2211934ca6f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deploying an AWS S3 static site to use Cloudflare WAF

PrerequisitesContinue reading on Medium »
Read more...

Bridged network won't work in an Active Directory environment
https://www.reddit.com/r/Pentesting/comments/z3bpx2/bridged_network_wont_work_in_an_active_directory/

I'm fairly new to pentesting and I would really appreciate some help. So I have realized that when I'm in an Active Directory environment my bridged network won't work that is in both virtual box and vmware however when I'm in a non active directory environment like at home, the bridged network works. Is this a configuration issue on my end or A.D has been configured that way to not allow bridged network? submitted by /u/Wooden-Weather688 (https://www.reddit.com/user/Wooden-Weather688)
[link] (https://www.reddit.com/r/Pentesting/comments/z3bpx2/bridged_network_wont_work_in_an_active_directory/) [comments] (https://www.reddit.com/r/Pentesting/comments/z3bpx2/bridged_network_wont_work_in_an_active_directory/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DraftKings gamblers lose $300,000 to credential stuffing attack

https://cdn-images-1.medium.com/max/2560/0*10QY1fz_ovjeKihj.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Security

https://cdn-images-1.medium.com/max/2600/1*Ii_vHt2UYTpNX8je6x-OBg.jpeg
In this series, we’re exploring OWASP security challenges, if you haven’t seen the earlier article, please see here first.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP API Security — B

https://cdn-images-1.medium.com/max/2600/1*4QpdBM516FvHCha1B67-Yw.jpeg
Recently there was the biggest hack in history where 2.1 million people were impacted and their personal information was leaked in the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Fake MSI Afterburner targets Windows gamers with miners, info-stealers

Fake MSI Afterburner targets Windows gamers with miners, info-stealersPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Windows gamers and power users are being targeted by fake MSI Afterburner download portals to infect users with cryptocurrency miners and the RedLine information-stealing malware.The MSI Afterburner is a GPU utility that allows you to configure overclocking, create fan profiles, perform video capturing, and monitor your installed graphics cards’ temperature and CPU utilization.

While created by MSI, the utility can be used by users of almost all graphics cards, leading to its use by millions of gamers worldwide who tweak settings to improve game performance, make their GPUs more silent, and achieve lower temperatures.

However, the tool’s popularity has also made it a good target for threat actors, who are looking to target Windows users with powerful GPUs that can be hijacked for cryptocurrency mining.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Impersonating MSI AfterburnerAccording to a new report by Cyble, over 50 websites impersonating the official MSI Afterburner site have appeared online in the past three months, pushing XMR (Monero) miners along with information-stealing malware.
https://www.bleepstatic.com/images/news/u/1220909/Phishing/Figure%201%20-%20Phishing%20page%20downloading%20malicious%20MSI%20Afterburner%20installer.jpg
Stealthy mining while stealing your passwordsWhen the fake MSI Afterburner setup file (MSIAfterburnerSetup.msi) is executed, the legitimate Afterburner program will be installed. However, the installer will also quietly drop and run the RedLine information-stealing malware and an XMR miner in the compromised device.

The miner is installed through a 64-bit Python executable named ‘browser_assistant.exe’ in the local Program Files directory, which injects a shell into the process created by the installer.

This shellcode retrieves the XMR miner from a GitHub repository and injects it directly into memory in the explorer.exe process. Since the miner never touches the disk, the chances of being detected by security products are minimized.

The miner connects to its mining pool using a hardcoded username and password and then collects and exfiltrates basic system data to the threat actors.

One of the arguments the XMR miner uses is ‘CPU max threads’ set to 20, topping most modern CPU thread count, so it’s set to capture all available power.
https://www.b[...]

___________________________
@hacking_Attack
@Hacking_Video

leepstatic.com/images/news/u/1220909/Code%20and%20Details/Figure%2012%20%E2%80%93%20Injected%20XMR%20mining%20pool%20details%20in%20the%20memory%20explorer_exe%20.jpg
Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-7-1-300x150.png Google Chrome extension used to steal cryptocurrency, passwordsNovember 23, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-6-2-300x150.png Attackers bypass Coinbase and MetaMask 2FA via TeamViewer, fake support chatNovember 22, 2022
Reading Time: 5 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-5-1-300x150.png AXLocker – a new ransomware that encrypts yours files, and then steals your Discord accountNovember 21, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-4-1-300x150.png Google Roulette: Developer console trick can trigger XSS in Chromium browsersNovember 18, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Fake MSI Afterburner targets Windows gamers with miners, info-stealers first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video