Author: HackWatchit

In brief Top holders of President Trump’s official meme coin were invited to an exclusive dinner Thursday. An attendee attempted to launch a Solana meme coin of their own, right from the event. The coin quickly peaked at a $450,000 market cap before plunging, and never recovered. An attendee of Thursday’s Trump crypto gala dinner launched a Solana meme coin via Pump.fun amid the president’s speech—posting evidence of the action in a Telegram group.The token failed to gain much traction, however, topping out at a market cap of $450,000 before it crashed and burned, with holders who apparently gambled on…

Law enforcement in the United States and Europe this week disrupted the infrastructure of the long-running DanaBot malware-as-a-service (MaaS) operation that authorities said infected more than 300,000 systems and caused more than $50 million in damages.The U.S. Justice Department (DOJ) also charged 16 people in connection with the Russian-based cybercriminal network, including two Russian nationals – Aleksandr Stepanov, also known as “JimmBee,” and Artem Aleksandrovich Kalinkin (“Onix”) – for conspiracy, aggravated identity theft, wiretapping, and other charges. Both are said to be in Russia and have not been arrested.The case, in which law enforcement agencies were aided by a dozen…

Darin Roberts// Do you ever find yourself on an engagement and need just a few more names with which to conduct a password spray? Everyone knows the more emails you have, the higher chance of getting in with one of the easy to guess (and often used) passwords. InSpy is a great way to get some names to convert to emails. InSpy is authored by Johnathan Broche and was last updated August 24, 2018. The following is from https://github.com/gojhonny/InSpy: InSpy is a python based LinkedIn enumeration tool. Inspy has two functionalities: TechSpy and EmpSpy. TechSpy – Crawls LinkedIn job listings for technologies used by…

CVE-2025-4427 and CVE-2025-4428 – the two Ivanti Endpoint Manager Mobile (EPMM) vulnerabilities that have been exploited in the wild as zero-days and patched by Ivanti last week – are being leveraged by a Chinese cyber espionage group that has been exploiting zero-days in edge network appliances since at least 2023, EcleticIQ researchers have shared. Among the entities targeted in this campaign were: a local government authority and healthcare organizations in the UK; a research institute, a legal firm, a telco and a manufacturer in Germany; an aerospace leasing company in Ireland; a healthcare provider, a medical device manufacturer, a firearms…

Cybercriminals are getting smarter. Not by developing new types of malware or exploiting zero-day vulnerabilities, but by simply pretending to be helpful IT support desk workers.Attackers affiliated with the 3AM ransomware group have combined a variety of different techniques to trick targeted employees into helping them break into networks.It works like this.First, a company employee finds their inbox bombarded with unsolicited emails within a short period of time, making it practically impossible to work effectively.At the same time, the attackers call the employee pretending to come from the organisation’s legitimate IT support department. Spoofed phone numbers help lend credibility to…

The Defense Department’s cyber workforce is expected to experience cuts amid an ongoing hiring freeze and efforts to reduce the overall number of DoD civilians. DoD officials are looking to limit the impact of the cuts by focusing on strategic reductions to the cyber workforce, as well as upskilling opportunities for staff. The DoD cyber workforce comprises about 225,000 civilians, military personnel and contractor employees. The broad category includes positions focused on cybersecurity, artificial intelligence, software engineering and other IT work. In recent years, DoD ramped up its use of direct hire authority to drive down vacancy rates for cyber…

Cybercriminals are using TikTok videos to trick users into infecting themselves with Vidar and StealC information-stealing malware in ClickFix attacks. As Trend Micro recently discovered, the threat actors behind this TikTok social engineering campaign are using videos likely generated using AI that ask viewers to run commands claiming to activate Windows and Microsoft Office, as well as premium features in various legitimate software like CapCut and Spotify. “This attack uses videos (possibly AI-generated) to instruct users to execute PowerShell commands, which are disguised as software activation steps. TikTok’s algorithmic reach increases the likelihood of widespread exposure, with one video reaching more than…

Introduction Effective collaboration is essential when confronting today’s sophisticated cyber adversaries, particularly those operating with state tolerance or direction. At CrowdStrike, we routinely work alongside law enforcement agencies and industry partners to identify, monitor, and mitigate cyber threats. Recently, we provided technical assistance to the U.S. Department of Justice as part of a coordinated effort to disrupt the activities of individuals involved in developing, administering, and operating the DanaBot malware, tracked by CrowdStrike as SCULLY SPIDER. The U.S. Defense Criminal Investigative Service (DCIS) seized the botnet’s U.S.-based server infrastructure, effectively neutralizing the threat actor’s ability to issue commands to compromised…

A newly disclosed vulnerability in Google Chrome and Chromium-based browsers is putting users at risk of data leaks. Tracked as CVE-2025-4664, the flaw allows attackers to extract sensitive information like login tokens and session IDs from previously visited websites. The security issue was detailed today by Wazuh, a cybersecurity company specializing in open-source threat detection. It affects users on both Windows and Linux, including Debian and Gentoo systems. How It Works The issue resides in the Chrome’s handling of the Link HTTP header when loading sub-resources like images and scripts. While most browsers ignore referrer policies in these headers, Chrome…