Hacking on Medium
10 Growth-Hacking Techniques to Boost Your Business Growth Without Technical Skills

https://cdn-images-1.medium.com/max/2600/0*F6heWsXKGSIF9H6f
Don’t let a lack of technical skills hold back your business growth. Check out these 10 non-technical strategies that can help you achieve…

Continue reading on Medium »

Black Hat Ethical Hacking
LockBit Ransomware Gang Testing First-Ever Ransomware for macOS

LockBit Ransomware Gang Testing First-Ever Ransomware for macOSPost Views: 8 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes LockBit Ransomware Gang Targets Macs with New EncryptorsThe notorious LockBit ransomware gang has recently developed a new set of encryptors designed to target macOS devices for the first time, marking a significant milestone in the history of ransomware attacks. The new ransomware encryptors were discovered by cybersecurity researcher MalwareHunterTeam, who found them in a ZIP archive on VirusTotal that contained most of the available LockBit encryptors.

Historically, the LockBit operation had only used encryptors designed for attacks on Windows, Linux, and VMware ESXi servers. However, the archive also contained previously unknown encryptors for macOS, ARM, FreeBSD, MIPS, and SPARC CPUs, including one named ‘locker_Apple_M1_64’ that targets the newer Macs running on Apple Silicon, and lockers for PowerPC CPUs used by older Macs.
https://www.bleepstatic.com/images/news/ransomware/l/lockbit/macos-encryptor/encryptor-list.jpg
Archive of available LockBit encryptors
Source: BleepingComputer Discovery of LockBit’s New Mac Encryptors on VirusTotalFurther research by cybersecurity researcher Florian Roth found an Apple M1 encryptor uploaded to VirusTotal in December 2022, indicating that these samples have been floating around for some time.

BleepingComputer analyzed the strings in the LockBit encryptor for Apple M1 and found strings that are out of place in a macOS encryptor, indicating that these were likely test builds. This includes numerous references to VMware ESXi, which is out of place in an Apple M1 encryptor, as VMware has announced they would not be supporting the CPU architecture. _check_esxi
esxi_
_Esxi
_kill_esxi_1
_kill_esxi_2
_kill_esxi_3
_kill_processes
_kill_processes_Esxi
_killed_force_vm_id
_listvms
_esxcfg_scsidevs1
_esxcfg_scsidevs2
_esxcfg_scsidevs3
_esxi_disable
_esxi_enableAdditionally, the encryptor contains a list of sixty-five file extensions and filenames that will be excluded from encryption, all of them being Windows file extensions and folders.

A small snippet of the Windows files the Apple M1 encryptor will not encrypt is listed below, all out of place on a macOS device. .exe
.bat
.dll
msstyles
gadget
winmd
ntldr
ntuser.dat.log
bootsect.bak
autorun.inf
thumbs.db
iconcache.dbSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses The New Mac Encryptor Likely a Test BuildDespite the alarming nature of this discovery, cybersecurity experts remain optimistic that these encryptors are not yet ready for deployment in actual attacks against macOS devices. Cisco Talos researcher Azim Khodjibaev stated that the encryptors were meant as a test and were never intended for deployment in live cyberattacks.

MacOS cybersecurity expert Patrick Wardle further confirmed this theory, stating that the encryptor is far from complete as it is missing the required functionality to encrypt Macs properly. Wardle believes the macOS encryptor is based on the Linux version and compiled for macOS with some basic configuration settings, and that when launched, it crashes due to a buffer overflow bug in its code.
Worth stressing, as LockBit macOS sample though *compiled* for macOS really isn't (yet) designed for macOS.

1. Unsigned (won't easily run on macOS)
2. Doesn't appear to take into account TCC/SIP, so won't be able to encrypt much of anything

So (in current form) macOS impact: ~0 https://t.co/zYVNhfYLR[...]

o

— Patrick Wardle (@patrickwardle) April 16, 2023 LockBit’s Plans for Developing Mac EncryptorWhile LockBit’s development of a macOS encryptor is concerning, it’s important to remember that all computer users, including Mac owners, should practice good online safety habits, including keeping the operating system updated, avoiding opening unknown attachments and executables, generating offline backups, and using strong and unique passwords at every site they visit.

As LockBit is known for pushing the envelope in ransomware development, it would not be surprising to see more advanced and optimized encryptors for these CPU architectures released in the future.
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Mythic In response to questions from BleepingComputer, the public-facing representative of LockBit, known as LockBitSupp, said that the Mac encryptor is “actively being developed.” While LockBit has a history of toying with security researchers and the media, if true, we will likely see more production-quality versions in the future.

Additionally, while it’s not clear how useful a macOS encryptor would be in the enterprise, some LockBit affiliates target consumers and small businesses, where an encryptor like this could be more useful.
Trending: 10-Year-Old Windows vulnerability still being exploited in the 3CX attacks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-16-300x150.png Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking ToolApril 14, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-15-300x150.png New generation of botnets builds high-performance VPS-based DDoS attacksApril 13, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-14-300x150.png Microsoft Patches Windows Zero-Day Exploited to Spread RansomwareApril 12, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-13-300x150.png Over One Million WordPress Websites Infected with Balada Injector Malware CampaignApril 11, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post LockBit Ransomware Gang Testing First-Ever Ransomware for macOS first appeared on Black Hat Ethical Hacking.

hacking: security in practice
Pool on the roof - April 17, 2023

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

hacking: security in practice
For beginners

Starting a discord for beginners to share files/tutorials and chat with like minded people will be dropping free tutorials and enough members https://discord.gg/TFSVuJMA

submitted by /u/dropin_bics
[link] [comments]

hacking: security in practice
BBC speaks to hackers on both sides of the cyber war in Ukraine/ Russia. Turns out vigilante groups are working closely with military hacking teams.

https://external-preview.redd.it/IV2Ji0gYUKACTkLylHZl7K9hY4nV1o9mOwDSy9UloOU.jpg?width=320&crop=smart&auto=webp&s=80f7d9b74b98a62c72f2b03cf5851d0cfd2c9634 submitted by /u/tides977
[link] [comments]

A step-by-step guide to using sqlmap to craft malicious requests:

Using tools like Burp Suite or sqlmap to craft malicious requests that inject code or commands into web apps is a common technique used by…Continue reading on Dev Genius »
Read more...

Dark Reading: Attacks/Breaches
Top 5 Data Security RSAC 2023 Sessions to Attend

A little preconference reconnoitering of upcoming seminars, keynotes, and track sessions makes plotting your days easier. Here's one attendee's list.

Modoboa mail hosting-də CSRF açığı

Bu dəfə CSRF açığı ilə bağlı kiçik məqalə hazırlamaq qərarına gəldim.Düşünürəm ki CSRF açığını yazıyla izah etmək çətindir amma yenə də…Continue reading on Medium »
Read more...

Hacking on Medium
Hacker Simulator Games: Unlock Your Inner Hacker

https://cdn-images-1.medium.com/max/1920/1*IN75AmKfTuK_3upaZohl-Q.jpeg
Hacker simulator games have been growing in popularity over recent years.

Continue reading on Medium »

Hacking on Medium
From Art to Hacking: Exploring the Similarities and Differences of cDc and Warhol’s Factory

https://cdn-images-1.medium.com/max/1000/0*FmxX1glFiiOASJfM
The Cult of the Dead Cow (cDc) and Warhol’s Factory are two creative collectives that have left an indelible mark on American culture…

Continue reading on Medium »