Author: HackWatchit

Cofense Intelligence reveals a novel phishing technique using blob URIs to create local fake login pages, bypassing email security and stealing credentials. Cybersecurity researchers at Cofense Intelligence have reported a new and increasingly effective method cybercriminals are using to deliver credential phishing pages directly to users’ email inboxes. This technique, which emerged in mid-2022, leverages “blob URIs” (binary large objects- Uniform Resource Identifiers). For your information, Blob URIs are addresses that point to temporary data saved by your internet browser on your own computer. These have legitimate applications on the internet, such as how YouTube temporarily stores video data within…

Education giant Pearson suffered a cyberattack, allowing threat actors to steal corporate data and customer information, BleepingComputer has learned. Pearson is a UK-based education company and one of the world’s largest providers of academic publishing, digital learning tools, and standardized assessments. The company works with schools, universities, and individuals in over 70 countries through its print and online services. In a statement to BleepingComputer, Pearson confirmed they suffered a cyberattack and that data was stolen, but stated it was mostly “legacy data.” “We recently discovered that an unauthorized actor gained access to a portion of our systems,” a Pearson representative…

Cyber criminals are raising the stakes. This month, researchers uncovered a sophisticated, multi-stage malware campaign delivering some of the most prevalent commodity malware—AgentTesla, Remcos, and XLoader—via stealthy techniques designed to evade detection. Meanwhile, FakeUpdates retains its top spot in the malware rankings, impacting 6% of organizations globally, and the education sector remains the most targeted industry. Sophisticated Attack Chain Evades Detection In April, attackers were found using phishing emails posing as order confirmations to launch a complex infection chain. These emails contain a malicious 7-Zip archive with a Jscript-encoded (.JSE) file that executes a Base64-encoded PowerShell payload. This, in turn,…

Cybercriminal services target end-of-life routers, FBI warns Pierluigi Paganini May 09, 2025 The FBI warns that attackers are using end-of-life routers to deploy malware and turn them into proxies sold on 5Socks and Anyproxy networks. The FBI released a FLASH alert warning about 5Socks and Anyproxy malicious services targeting end-of-life (EOL) routers. Attackers target EoL devices to deploy malware by exploiting vulnerabilities and create botnets for attacks or proxy services. The alert urges replacing compromised routers or preventing infection by disabling remote admin and rebooting. End-of-life (EOL) routers lack security updates and are vulnerable to cyber attacks. The lack of…

John Strand// Join John as he covers what he and the BHIS Systems team have been working on lately – creating a C2/Implant/Malware test bed. Testing our C2/malware solutions is important because vendors tend to over-hype their capabilities. He’ll cross reference some different malware specimens with the MITRE ATT&CK framework and cover how you can use these techniques to test your defensive solutions at both the endpoint and the network. Slides available here: https://blackhillsinformationsecurity.shootproof.com/gallery/7613320/ Find out when our next LIVE webcast is by signing up for our email notifications: https://blackhillsinfosec.us15.list-manage.com/subscribe?u=e12efe2af6573cc76c90fc019&id=b7b017ed3a Available live/virtual and on-demand

The affiliate panel of the infamous LockBit Ransomware-as-a-Service (RaaS) group has been hacked and defaced, showing a link to a MySQL database dump ostensibly containing leaked data relating to the group’s operations: The defaced dark web affiliate panel (Source: Help Net Security) The breach has been confirmed by LockBitSupp – the creator, developer and administator of the LockBit ransomware group – who downplayed the attack by saying that decryptors, stolen company data, and the ransomware source code haven’t been compromised. The dump of the backend MySQL database was apparently generated on April 29, 2025, and contains: Nearly 60,000 unique bitcoin…

Healthcare leaders are facing a mounting security crisis: More than two-thirds of healthcare organizations experienced ransomware attacks in 2024. Five of the top 10 ransomware attacks last year involved healthcare, and recovery costs averaged more than $2.5 million per incident. This resurgence of ransomware attacks on the industry is partly thanks to the spread of ransomware-as-a-service (RaaS), eliminating the need for advanced technical expertise to carry out attacks. Healthcare continues to be an attractive target due to its critical nature: when patient lives are at stake, health systems are more likely to pay the ransom to restore operations as quickly as…

Acting Chief of Naval Operations Adm. Jim Kilby delivered an address at Modern Day Marine 2025 on May 1. In his speech, Kilby emphasized the importance of advancing Naval integration with the Marine Corps, focusing on the synchronization and alignment of warfighting efforts. He also underscored the significance of a strong amphibious fleet in maintaining peace through strength across the maritime domain. “The Navy is thinking, acting, and operating differently to increase amphibious readiness,” said Kilby. “We are tackling this problem from all angles – including our maintenance procedures, material readiness, manning, and industry partnerships.” He further highlighted that this…

You’ve probably noticed AI popping up literally everywhere lately, haven’t you? From the little chat window when you’re trying to buy something online to some seriously complex stuff like helping doctors or playing the stock market. It’s pretty amazing, really. And what even is AI? They’re just super clever computer models, honestly, built to munch through tons of data and make decisions way faster than our human brains ever could. But here’s where things get a bit… hazy. A lot of the time, AI feels like this total “black box.” It gives us the answer – “Yep, loan approved!” or…