Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware
https://thehackernews.com/2025/04/microsoft-warns-of-tax-themed-email.html #Cybercrime #Malware #EMail #PDF #QRCode

Basta Chiacchiere! Il DARPA vuole vederci chiaro sui Computer Quantistici. Entro il 2033 il primo?

Link all'articolo : https://www.redhotcyber.com/post/basta-chiacchiere-il-darpa-vuole-vederci-chiaro-sui-computer-quantistici-entro-il-2033-il-primo/

CVE-2025-30065: la Vulnerabilità Critica RCE di Apache Parquet che Minaccia l’Ecosistema Big Data

Link all'articolo : https://www.redhotcyber.com/post/cve-2025-30065-la-vulnerabilita-critica-rce-di-apache-parquet-che-minaccia-lecosistema-big-data/

Dal codice alla scalabilità: il viaggio di un’applicazione con Docker e Kubernetes

Link all'articolo : https://www.redhotcyber.com/post/dal-codice-alla-scalabilita-il-viaggio-di-unapplicazione-con-docker-e-kubernetes/

#HuntersInternational shifts from #ransomware to pure data extortion

https://www.bleepingcomputer.com/news/security/hunters-international-rebrands-as-world-leaks-in-shift-to-data-extortion/

#CISA warns of #FastFlux #DNS evasion used by #cybercrime gangs

https://www.bleepingcomputer.com/news/security/cisa-warns-of-fast-flux-dns-evasion-used-by-cybercrime-gangs/

Yikes! Only 19 and already slinging malware with the help of Russian bulletproof hosting? It really hammers home how low the barrier to entry has become these days...

Let's talk Bulletproof Hosting (BPH) for a sec: These are basically your "we don't give a damn *what* you host" providers. Unsurprisingly, they're a favorite among cybercriminals. Proton66 seems to be one of the bigger players in that shady neighborhood. And yeah, it's definitely a problem.

But here's the kicker – a total rookie mistake: This person left a directory wide open on their server. BOOM! Just like that, their whole infrastructure was exposed. A classic OPSEC fail! Look, everyone's gotta start somewhere, but maybe not *quite* like this.

The individual behind this, known as 'Coquettte,' is apparently pushing malware disguised as fake antivirus software. They're using the Rugmi loader to drop info stealers like Lumma, Vidar, and Raccoon. So, definitely keep an eye out for any sketchy ZIP files or installers doing the rounds!

Bottom line: Even beginners can cause real damage, especially with services like BPH readily available. And it just goes to show, nailing those OPSEC basics is absolutely crucial!

So, what's your take on BPH? Do you see it as a serious threat, or is it more of a minor nuisance in the grand scheme of things? Let me know below!

Buon Compleanno Errore 404, 35 anni e non sentirli. Viva gli errori e i posti mai trovati!

Link all'articolo : https://www.redhotcyber.com/post/buon-compleanno-errore-404-35-anni-e-non-sentirli-viva-gli-errori-e-i-posti-mai-trovati/

I fallimenti fanno parte della nostra vita, quanti di noi ne ha avuti e quanti ne continueremo avere? Oggi parliamo di un #codice, un #codice semplice snello e schietto, il #codice 404. Scopriremo che non è soltanto un banale errore che tutti quanti conosciamo.

Where to Find Aspiring Hackers

This analysis delves into Proton66, a bulletproof hosting network enabling cybercrime operations and serving as a hub for aspiring cybercriminals. It focuses on a threat actor known as 'Coquettte' and their ties to the Horrid hacking group, a loosely organized cybercriminal collective. The investigation reveals a fake cybersecurity website, cybersecureprotect[.]com, which exposed its malicious infrastructure due to an OPSEC failure. Coquettte's activities include distributing malware, keyloggers, and trojans through Proton66's infrastructure. The research also uncovers other projects operated by this actor, including a website hosting guides for illegal activities. The analysis provides technical details of Coquettte's malware infrastructure and explores Proton66's role as a breeding ground for amateur threat actors.

Pulse ID: 67efe859080e7d3823c1d41e
Pulse Link: https://otx.alienvault.com/pulse/67efe859080e7d3823c1d41e
Pulse Author: AlienVault
Created: 2025-04-04 14:10:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Oltre 90.000 siti WordPress vulnerabili: grave falla di sicurezza in Kubio

Link all'articolo : https://www.redhotcyber.com/post/oltre-90-000-siti-wordpress-vulnerabili-grave-falla-di-sicurezza-in-kubio/

Kriminalstatistik: #Cybercrime sinkt – aber nur auf ersten Blick | Security https://www.heise.de/news/Kriminalstatistik-Cybercrime-sinkt-aber-nur-auf-ersten-Blick-10337182.html

Vertragsärztliche Versorgung: Neue IT-Sicherheitsrichtlinie veröffentlicht | Security https://www.heise.de/hintergrund/Vertragsaerztliche-Versorgung-Neue-IT-Sicherheitsrichtlinie-veroeffentlicht-10337415.html #CyberCrime #Datenschutz #privacy #DataLeak #Datenleck #Digitalisierung #digitalization #DigitalHealth #DSGVO #GDPR

Cyberkriminalität richtet immer größere Schaden an – Source: www.csoonline.com https://ciso2ciso.com/cyberkriminalitat-richtet-immer-grosere-schaden-an-source-www-csoonline-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Cybercrime #CSOonline #CSOOnline

Class action contro OnlyFans! Ma quali modelle formose, erano i dipendenti dell’agenzia

Link all'articolo : https://www.redhotcyber.com/post/class-action-contro-onlyfans-ma-quali-modelle-formose-erano-i-dipendenti-dellagenzia/

The 1-15 December 2024 #cyberattacks timeline is out with 115 events and a #threat landscape dominated by #malware. #Cybercrime continues to be the main motivation, and #phishing the main initial access vector.

https://www.hackmageddon.com/2025/04/04/1-15-december-2024-cyber-attacks-timeline/

Quell’accento Nord Coreano ancora trae in inganno! I falsi lavoratori rubano dati e stipendi!

Link all'articolo : https://www.redhotcyber.com/post/truffe-it-dalla-corea-del-nord-i-falsi-lavoratori-remoti-rubano-dati-e-stipendi/

#Kidflix: Ermittler heben Kinderporno-Netzwerk aus und nehmen 79 Verdächtige fest | heise online https://www.heise.de/news/Kidflix-Ermittler-heben-Paedophilen-Netzwerk-aus-und-nehmen-79-Verdaechtige-fest-10337566.html #CyberCrime #Darknet

CISA is urging internet and cybersecurity providers to secure their networks against the evasive "fast flux" threat technique.

#cybersecurity #CISA #US #network #cybercrime #cyberthreat

https://cnews.link/cisa-fast-flux-warning-evasive-technique-isp-network-threat-1/

Lotta globale contro l’abuso online: chiusa la piattaforma pedopornografica "Kidflix" con quasi 2 milioni di utenti. Arresti e indagini in 38 Paesi. Scopri di più ➤
#Europol #Polizia #Cybercrime

https://buff.ly/pZC6T5K