Author: HackWatchit

Leader of Qakbot cybercrime network indicted in U.S. crackdown Pierluigi Paganini May 24, 2025 The U.S. indicted Russian Rustam Gallyamov for leading the Qakbot botnet, which infected 700K+ devices and was used in ransomware attacks. The U.S. authorities have indicted Russian national Rustam Gallyamov, the leader of the Qakbot operation, which infected over 700,000 computers and facilitated ransomware attacks. Qakbot, also known as QBot, QuackBot and Pinkslipbot, is an info-stealing malware that has been active since 2008. The malware spreads via malspam campaigns, it inserts replies in active email threads. Gallyamov began developing Qakbot in 2008, building a team that…

Both senior IT and cyber officials are working to speed up the ability to make data-driven decisions, especially at the edge, making secure collaboration essential. This exclusive Expert Edition is focused on getting everyone and everything — system- and data-wise — in that same car to drive toward creating work environments that support real-time, secure collaboration. You will pick up tips and tactics for developing, testing and implementing such environments. You’ll also learn how overall cybersecurity will benefit through the use of secure collaboration platforms. Download today!

69% of global respondents to a Jumio survey say AI-powered fraud now poses a greater threat to personal security than traditional forms of identity theft. This number rises to 74% in Singapore, with 71% also indicating that AI-generated scams are harder to detect than traditional scams. Rising AI concerns erode digital trust 69% of global consumers indicated they are more skeptical of the content they see online due to AI-generated fraud than they were last year. Just 37% of consumers said they more strongly believe that most social media accounts are authentic compared to last year, and only 36% claimed…

Jordan Drysdale // tl;dr uBlock Origin appears, based on non-scientific testing, to be fairly effective at keeping trackers from making outbound HTTP GET requests. Tested Extensions: No Add-ons v Ghostery v uBlock Origin v AdBlock PlusAnalyzed Website homepages: CNN v FoxNews v MSNBC I ran all of the following tests about the same. I clear my browser cache, start a new Burp session and disable the proxy intercept. Via Kali Linux, the following Firefox version: First up, CNN. I started this analysis with a straight and clean load of CNN.com with no extensions or add-ons enabled. CNN’s site generated 335 HTTP…

A critical XSS vulnerability, CVE-2024-27443, in Zimbra Collaboration Suite’s CalendarInvite feature is actively being exploited, potentially by the Sednit hacking group. Learn how this flaw allows attackers to compromise user sessions and why immediate patching is crucial. A new security weakness has been discovered in the Zimbra Collaboration Suite (ZCS), a popular email and collaboration platform. This issue, classified as CVE-2024-27443, is a type of cross-site scripting (XSS) flaw that could allow attackers to steal information or take control of user accounts. How the Flaw Works The problem lies specifically within the CalendarInvite feature of Zimbra’s Classic Web Client interface.…

The FBI warned that an extortion gang known as the Silent Ransom Group has been targeting U.S. law firms over the last two years in callback phishing and social engineering attacks. Also known as Luna Moth, Chatty Spider, and UNC3753, this threat group has been active since 2022 and was also behind BazarCall campaigns that provided initial access to corporate networks for Ryuk and Conti ransomware attacks. In March 2022, following Conti’s shutdown, the threat actors separated from the cybercrime syndicate and formed their own operation called Silent Ransom Group (SRG). In recent attacks, SRG impersonates the targets’ IT support…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued a joint advisory warning of active LummaC2 malware campaigns targeting the nation’s critical infrastructure. As recently as this month, federal investigators and third-party sources have observed threat actors deploying the LummaC2 infostealer to breach networks and siphon off sensitive data. The malware is being used to exploit security gaps, stealing credentials, financial records, and other high-value information, posing a serious threat to individuals and organizations across critical sectors. CISA and the FBI report that indicators of compromise (IOCs) linked to threat actors using the LummaC2 information-stealing malware…

In brief Despite ongoing attempts to eliminate bias and racism, AI models still apply a sense of “otherness” to names not typically associated with white identities. Experts attribute this issue to the data and training methods used in building the models. Pattern recognition also contributes, with AI linking names to historical and cultural contexts based on patterns found in its training data. What does a name like Laura Patel tell you? Or Laura Williams? Or Laura Nguyen? For some of today’s top AI models, each name is enough to conjure a full backstory, often linking more ethnically distinct names to…

We don’t have or use generative AI in our applications Nothing significant yet – We have or will have generative AI in our applications but haven’t yet researched or explored the possibility of securing it. Starting – We have begun to work on securing generative AI in our applications. Developing – We have started to implement some security measures for generative AI. Average – We have some policies or tools in place. Advanced – We have some enhanced security protocols specifically tailored for generative AI in our applications. Very advanced – We have comprehensive, mature, and proactive security solutions for…