Author: HackWatchit

Enhanced capabilities sustain the rapid growth of Vo1d botnet Pierluigi Paganini February 28, 2025 Operators behind the Vo1d botnet have enhanced its capabilities, enabling rapid growth in recent months. In September 2024, Doctor Web researchers uncovered a malware, tracked as Vo1d, that infected nearly 1.3 million Android-based TV boxes belonging to users in 197 countries. The malicious code acts as a backdoor allowing attackers to download and install third-party software secretly. In August 2024, several users reported that Dr.Web antivirus detected changes in their TV box system files. The problems were observed in several models, including the R4 (Android 7.1.2), TV…

U.S. lawmakers from the Senate and House of Representatives have reintroduced the Farm and Food Cybersecurity legislation that focuses on protecting America’s food supply chain by identifying cybersecurity vulnerabilities in the agricultural sector and improving protective measures of government and private entities against cyber threats. The Farm and Food Cybersecurity Act is supported by the Chamber of Commerce, Operational Technology Cybersecurity Coalition, North American Millers Association, National Cattlemen’s Beef Association, USA Rice, National Council of Farmer Cooperatives, and American Farm Bureau Federation. The legislation was introduced by House Representatives Brad Finstad for Minnesota, Jill Tokuda for Hawaii, Don Bacon for…

Serbian authorities have reportedly used an Android zero-day exploit chain developed by Cellebrite to unlock the device of a student activist in the country and attempt to install spyware. Cellebrite is an Israeli digital forensics company that develops tools used by law enforcement, intelligence agencies, and private companies to extract data from smartphones and other digital devices. Companies like Cellebrite commonly utilize zero-day exploits to access and extract data usually protected on locked phones. The use of this Android exploit was found by Amnesty International’s Security Lab in mid-2024 during forensic research on the logs of the impacted device. The organization…

Ransomware attacks against industrial organizations surged by 87% over the past year, while new malware families designed specifically for OT environments emerged. These findings highlight a troubling trend: OT systems are increasingly becoming mainstream targets, and even sophisticated threat actors use relatively unsophisticated tactics to infiltrate and disrupt industrial operations. State-sponsored groups embed themselves in critical infrastructure, while hacktivists and cybercriminals exploit known vulnerabilities, weak remote access configurations, and exposed OT assets. A persistent lack of visibility into OT environments continues to obscure the full scale of these attacks. These insights come from Dragos’ 2025 OT/ICS Cybersecurity Report, its eighth…

In an era of heightened cyberthreats and data breaches, there’s been an increasing focus on regulatory compliance. In addition to the global effort to enhance data privacy, the SEC has updated incident reporting guidelines. Businesses face increasing pressure to maintain compliance across regions, mitigate risks and improve consumer protection and stakeholder trust.  Transparency and Accountability in Cybersecurity Practices The SEC has adopted rules requiring companies to disclose cybersecurity incidents by providing information about their nature, scope and impact. Businesses must also provide accurate, detailed disclosures and avoid generic or misleading information about cybersecurity risks and incidents. The SEC emphasizes the need for…

Decrypt and Rug Radio’s parent company DASTAN brought its vision for its new prediction market platform MYRIAD to Consensus Hong Kong, with the company’s President Farokh Sarmad arguing that it will be “a good champion” for the crypto space.Speaking on the ‘Predicting Media Success’ panel alongside DASTAN CEO Loxley Fernandes, Sarmad explained that the prediction market’s integration with Decrypt and Rug Radio offers a new model for aligning incentives in the media ecosystem. Historically, he said, “the person who’s gotten the least amount of value from media is the reader, and it should start from there. It’s supposed to be…

Security operations teams are at breaking point. Analysts are drowning in alerts, detection engineers are stuck in an endless cycle of tuning rules, and proactive threat hunting has become a luxury rather than a priority. Meanwhile, cyber attacks are evolving, growing faster, smarter, and more sophisticated. To keep up, teams need to rethink how they operate. The solution isn’t to add headcount—it’s to work smarter. Today, generative AI helps security teams with simple tasks like summarizing incident reports. Agentic AI— AI that thinks, acts, and learns autonomously—is already handling security incidents end-to-end. (For an in-depth discussion of generative vs. agentic…

The generative AI (GenAI) landscape is evolving at breakneck speed, and with it, the challenges for enterprise security. DeepSeek’s R1 model, released on January 20, 2025, gained rapid popularity due to its high performance and cost-efficiency. It rivaled established AI models at a fraction of the cost. The open-source nature of DeepSeek also allowed AI developers to use it for free, contributing to its swift rise in app stores and industry rankings. Following the R1 release, Palo Alto Networks observed a 1,800% spike in DeepSeek traffic across our platform. This sudden surge serves as a stark reminder that new AI…

10 Oct 2023 Podcasts Brought to you by Antisyphon Training — https://www.antisyphontraining.com Talkin’ About Infosec News – 10/9/2023 Abusing Active Directory Certificate Services – Part 2 Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (17) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (3) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1) Derek Banks  (13) Derrick Rauch  (1) DFIR  (1) DNSTAP  (1) Ethan Robish  (14)…