Author: HackWatchit
Matthew Toussain // PowerShell is dead… well dying, kind of. JavaScript interpreters, on the other hand, are everywhere, and they are far from confined to the web browser. Join Matt Toussain as he explores a clandestine toolkit of in and out of browser techniques to accelerate the compromise. By leveraging inherent JavaScript capabilities, security professionals can acquire interactive sessions within a browser, harvest sensitive information against arbitrary origins, and pivot into internal networks. Between the browser and the host, there is ripe potential for catastrophic damage. Combining inherent Windows operating system controls with modern JavaScript implementations like ReactJS and Electron gives…
Leader of Qakbot cybercrime network indicted in U.S. crackdown Pierluigi Paganini May 24, 2025 The U.S. indicted Russian Rustam Gallyamov for leading the Qakbot botnet, which infected 700K+ devices and was used in ransomware attacks. The U.S. authorities have indicted Russian national Rustam Gallyamov, the leader of the Qakbot operation, which infected over 700,000 computers and facilitated ransomware attacks. Qakbot, also known as QBot, QuackBot and Pinkslipbot, is an info-stealing malware that has been active since 2008. The malware spreads via malspam campaigns, it inserts replies in active email threads. Gallyamov began developing Qakbot in 2008, building a team that…
of AI agents. LLMs are no longer just tools. They’ve become active participants in our lives, boosting productivity and transforming the way we live and work. OpenAI recently launched Operator, an AI agent that can autonomously perform various tasks, from browsing the web to filling out forms and scheduling appointments. Anthropic introduced MCP (Model Context Protocol), a new standard for how AI assistants interact with the outside world. With over five thousand active MCP servers already, adoption is growing rapidly. AI agents are also changing the landscape of software engineering. Tools like GitHub Copilot’s agentic mode, Claude Code, OpenAI Codex, and…
The full source code of SilverRAT, a notorious remote access trojan (RAT), has been leaked online briefly appearing on GitHub under the repository “SilverRAT-FULL-Source-Code” before being swiftly taken down. A snapshot of the repository, captured by Hackread.com via the Wayback Machine, reveals the entire project, its features, build instructions, and even a flashy marketing-style dashboard screenshot. Screenshot from the now deleted GitHub post (Image credit: Hackread.com) What Is SilverRAT? SilverRAT is a remote access trojan developed in C#, first surfacing in late 2023. It was attributed to a group known as Anonymous Arabic, believed to operate out of Syria. This…
OpenAI is planning to ship a new ChatGPT-powered product by 2026, but we aren’t looking at yet another model. In the U.S. v. Google antitrust, a slide deck pointed out that OpenAI has plans to “ship a [redacted] by 2026.” The redacted line comes from the very first slide of their H1 2025 strategy, dated December 2, 2024. According to the document, “Today, ChatGPT is in our lives through existing form factors — our website, phone, and desktop apps.” OpenAI hopes that ChatGPT will help in your life, no matter where you are, which appears to suggest that ChatGPT could soon expand…
John Strand // I wanted to take a few moments and address the “Hacking Back” law that is working people up. There is a tremendously well-founded fear that this law will lead to mass confusion, collateral damage and some say… possibly war. “At least they have not brought me up in this debate… Yet.” – A. Hitler While some of these fears are a bit unfounded they are still legitimate and need to be discussed clearly. Further, we need to back away from the extreme fringes of this debate. Unfortunately, the discussion has dissolved into whether hacking back is good or bad,…
Alibaba’s instant commerce platform has reportedly crossed the 40-million-daily-orders mark within a month of launch. As Reuters noted in a report Monday (May 26) on this milestone, the platform brings merchants from the eCommerce giant’s food delivery arm Ele.me onto its main domestic shopping app, Taobao, making deliveries within 60 minutes. The report added that this is part of a larger push by Chinese online platforms to invest in what has been called “instant retail.” Alibaba launched the service in late April and discussed it on its earnings call earlier this month. Fan Jiang, CEO of the company’s eCommerce segment,…
In brief A hacker exploited Solana-based decentralized exchange Mango Markets back in 2022. Crypto trader Avraham Eisenberg was convicted last year. But a judge has vacated Eisenberg’s fraud and manipulation charges. A trader who was convicted of manipulating Solana-based decentralized exchange Mango Markets to pinch $110 million in crypto had his conviction overturned on Friday. A jury last year convicted Avraham Eisenberg on counts of commodities fraud, commodities manipulation and wire fraud after he exploited the DeFi app, the sort that allows for the trading and lending of crypto assets without third-party intermediaries such as banks. Eisenberg exploited a feature in the…
In this Help Net Security video, Stefan Tanase, Cyber Intelligence Expert at CSIS, gives an overview of how cybercriminals are changing their tactics, including using legitimate tools to avoid detection and developing more advanced info-stealing malware. Tanase also talks about new social engineering tricks like fake CAPTCHAs, changes in ransomware patterns, and the rise of mobile phishing attacks.