Author: HackWatchit

TL;DR – ReversingLabs has identified a malicious npm package, “pdf-to-office,” that targets Atomic and Exodus crypto wallet users by silently patching local software to hijack transactions. The malware swaps recipient wallet addresses and remains persistent even after removal. Cybersecurity firm ReversingLabs (RL) has uncovered a new tactic threat actors are employing to target cryptocurrency users. Their latest research, shared with Hackread.com, reveals that cybercriminals are leveraging the npm (Node Package Manager) network to inject malicious code into locally installed cryptocurrency wallet software, specifically targeting Atomic Wallet and Exodus. This attack involves the malicious patching of legitimate software files, allowing attackers…

Cybersecurity discussions often spotlight phishing scams, ransomware attacks and other external threats. But there’s a foundational risk that quietly underpins many of these issues: poor handling of file uploads and delivery. In 2024, malicious file detections rose 14% over the previous year, but the issue isn’t just the presence of harmful files– it’s the everyday systems that allow them in.  Businesses that allow end-users to upload content often rely on quick solutions in the early days. Early on, a handful of open-source tools or DIY systems might suffice. But when user numbers climb, so does the risk. Without proper safeguards, uploaded files…

AkiraBot: AI-Powered spam bot evades CAPTCHA to target 80,000+ websites Pierluigi Paganini April 10, 2025 AkiraBot, a CAPTCHA-evading Python framework, has spammed over 80,000 websites with AI-generated messages, targeting small and medium-sized businesses. SentinelOne’s SentinelLabs researchers warn that AkiraBot, a spam framework, targets websites’ chats and contact forms to promote low-quality SEO services, AkiraBot has already targeted more than 400,000 websites and successfully spammed at least 80,000 websites since September 2024. AkiraBot uses LLM-generated content and rotating attacker-controlled domains to bypass spam filters. The spam framework evades CAPTCHA and network detection using proxies, unrelated to the Akira ransomware group. The…

A recent Congressional Research Service (CRS) report detailed that a decade-old federal framework that enables cybersecurity information sharing between the government and private sector is set to expire on Sept.30, 2025. Originally enacted to strengthen collective defenses against cyber threats, the authorization has become a cornerstone of national cybersecurity strategy. As the provisions in this authorization are set to expire, industry groups are urging Congress to renew the provisions, warning that losing this legal foundation could weaken threat intelligence coordination at a critical time. Chris Jaikaran, a cybersecurity policy specialist, wrote in the CRS report that Congress may choose to…

Three key federal cyber regulations to watch under Trump GOP lawmakers are focused on harmonizing key cyber regulations, including CISA’s proposed incident reporting rule and HHS’ new cyber update to HIPAA. Justin Doubleday@jdoubledayWFED April 10, 2025 6:29 pm 3 min read The second Trump administration’s cybersecurity policy is still coming into view, but GOP lawmakers are calling for the White House to kick off a review of existing and future cyber regulations. Lawmakers and policy experts are particularly focused on three key rules: the Cybersecurity and Infrastructure Security Agency’s incident reporting requirements; the Department of Health and Human Services’ proposed…

Hackers started exploiting a high-severity flaw that allows bypassing authentication in the OttoKit (formerly SureTriggers) plugin for WordPress just hours after public disclosure. Users are strongly recommended to upgrade to the latest version of OttoKit/SureTriggers, currently 1.0.79, released at the beginning of the month. The OttoKit WordPress plugin allows users to connect plugins and external tools like WooCommerce, Mailchimp, and Google Sheets, automate tasks like sending emails and adding users, or updating CRMs without code. Statistics show that the product is active on 100,000 websites. Yesterday, Wordfence disclosed an authentication bypass vulnerability in OttoKit, identified as CVE-2025-3102. The flaw impacts all versions…

Fortinet has released patches for flaws affecting many of its products, among them a critical vulnerability (CVE-2024-48887) in its FortiSwitch appliances that could allow unauthenticated attackers to gain access to and administrative privileges on vulnerable devices. About CVE-2024-48887 Fortinet offers a range of FortiSwitch networking appliances, including access switches, distribution switches (for managing traffic), industrial/rugged switches, and core switches designed for data centers. Fortinet describes CVE-2024-48887 as an unverified password change vulnerability in the FortiSwitch GUI, which may allow a remote unauthenticated attacker to modify admin passwords via a specially crafted request to the set_password endpoint. The vulnerability affects FortiSwitch…

On April 8, Bitcoin’s net unrealized loss (NUP) ratio spiked to 0.0578, the highest level since November 2023. Meanwhile, the net unrealized profit/loss ratio dropped to 0.4253 on the same day, its lowest point since September 2024. This followed Bitcoin’s drop to $76,000 amid a sharp and aggressive retracement from the mid-$80,000 range it traded in for the past several weeks. NUPL and NUL are valuable tools for assessing the behavioral state of Bitcoin holders. These metrics are derived from the difference between Bitcoin’s current market price and the realized price — the average price at which all coins were…

President Trump, who has pulled the security clearances of dozens of people within the intelligence and security industry, is turning his focus to cybersecurity expert and former CISA head Chris Krebs and another former government official.In a memorandum released this week, the president ordered federal agencies to revoke security clearances granted to Krebs – who Trump fired as CISA director after Krebs said the 2020 election “was the most secure in American history” – and “individuals at entities associated with Krebs,” including at cybersecurity firm SentinelOne, where Krebs serves as CIO and chief public policy officer.He also ordered the Justice…