Author: HackWatchit
Orange CyberDefense identified a sophisticated threat cluster, dubbed Green Nailao, targeting European organizations, with a particular focus on the healthcare sector between June and October last year. The campaign, tracked by the Orange CyberDefense CERT, employed DLL search-order hijacking to deploy the notorious ShadowPad and PlugX implants, both of which are frequently linked to China-nexus cyber intrusions. The ShadowPad variant uncovered in this operation was notably obfuscated, leveraging Windows services and registry keys to ensure persistence within compromised systems. Through comprehensive incident response engagements, it was discovered that the Green Nailao attackers had also deployed an undocumented ransomware payload. This…
For most public sector organizations, digital transformation is a work in progress, with the complexity of integrating new systems and privacy and security concerns remaining key barriers, according to a report by SolarWinds. Only 6% of respondents report having fully completed their digital transformation journey, while most indicate they are somewhere along the journey, with efforts either well underway (41%) or beginning implementation in some areas with limited progress (42%). “As the public sector navigates the evolving technology landscape, more organizations will continue to redirect operations and workloads to the cloud and adopt hybrid IT solutions,” said Travis Galloway, Senior…
The WebSocket Protocol, standardized in 2011 with RFC 6455, enables full-duplex communication between clients and web servers over a single, persistent connection, resolving a longstanding limitation of HTTP that hindered bidirectional client to server communication. For example, if you’d like to receive real-time sports updates for a game, your web browser would need to send a request to the web server once every second checking if there were any changes to the score. With WebSockets, the server sends your browser the updates as they happen, removing the need for constant polling. This reduces bandwidth usage and delays experienced by the…
The dozens of USDS cuts last week hit teams like product management, design, and procurement. Kamens and other sources told WIRED that he is the only person from the USDS engineering team who was fired. He and others speculate that he was targeted because he had been publicly critical of DOGE in the weeks before the USDS cuts. DOGE did not return a request for comment about his removal.While all large IT systems need to be protected from hacking threats, Kamens says that the most urgent projects he was working on at the VA involved containing veterans’ sensitive personal data…
In today’s digital world, the line between reality and deception has become increasingly blurred, with cybercriminals leveraging cutting-edge AI technologies to exploit our trust and interest in celebrities. As we continue to engage with the internet in unprecedented ways, McAfee’s 2024 Celebrity Hacker Hotlist sheds light on a growing threat—online scams using the identities of our favorite stars. Scarlett Johansson Leads the List of Most Exploited Celebrity Names At the forefront of McAfee’s latest list is Scarlett Johansson, a renowned actress, recognized for her roles in Marvel’s Black Widow and Lost in Translation. However, this time, Johansson isn’t making headlines…
Typosquatting is when someone registers a web address that’s a misspelling of a known website — usually a popular one. Typically, it’s done with cybercrime in mind. Take the example of “Aamazon.com” over “Amazon.com.” A few things could happen: A person could mistakenly tap in a typo of “Aamazon” and wind up on a counterfeit “Aamazon.com” site. A scammer could use the “Aamazon” address in a phishing link sent by email, text, or social media — trying to trick victims into thinking it’s a legitimate link. The phony “Aamazon” address could show up in search, leading people to think it’ll…
B1ack’s Stash released 1 Million credit cards Pierluigi Paganini February 21, 2025 Experts warn that the carding website B1ack’s Stash released a collection of over 1 million unique credit and debit cards. D3 Lab researchers reported that on February 19, 2025, the carding website B1ack’s Stash released a collection of over 1 million unique credit and debit cards. Experts speculate that B1ack’s Stash used the free card release as a marketing strategy. The decision to release free samples aims at attracting new customers and gain notoriety in the cybercrime ecosystem. The marketplace administrator announced the data leak on a popular cybercrime forum, claiming the release of a…
New evidence is emerging to support an apparent trend of the once-distinct border between nation-state cyber-spying groups and financially motivated cybercriminals is becoming increasingly porous.Threat intelligence units with Trend Micro and Orange Cyberdefense CERT this week reported detecting campaigns in which the bad actors deployed PlugX and its successor, ShadowPad – both tools linked to China-backed cyberespionage activity – in ransomware attacks in Europe, with Trend Micro researchers seeing similar incidents in the Middle East, Asia, and South America.“ShadowPad is known for its widespread usage in cyberespionage campaigns against government entities, academic institutions, energy organizations, think tanks, or technology companies,” Cyberdefense researchers…
The Turkish government is proposing a controversial new cybersecurity law that could make it a criminal act to report on data breaches. The new legislation proposes penalties for various cybersecurity-related offences. But they key one which has people concerned is this:”Those who carry out activities aimed at targeting institutions or individuals by creating the perception that there has been a data breach in cyberspace, even though there has been no data breach, shall be sentenced to imprisonment for a term of two to five years.”The problem is, of course, that such a law may discourage the reporting of any potential data…