MalwareTips

A threat actor leaked 200,000 records containing personal information of Facebook Marketplace users. The data was allegedly stolen from a Meta contractor by a hacker called 'algoatson'.

🚨BREAKING: U.S. Government takes down China-linked botnet!Volt Typhoon targeted vulnerable routers in a major hacking campaign. The FBI remotely dismantled the KV-botnet, disrupting covert data transfer networks. Stay vigilant and follow @CISAgov guidance for device security!

Warning: New malware linked to China-based espionage group UNC5221 targets Ivanti Connect Secure VPN and Policy Secure devices. The malware includes web shells like BUSHWALK, CHAINLINE, FRAMESTING, and a LIGHTWIRE variant.

Numerous iOS apps are secretly utilizing push notifications to run background processes, collecting user data in potential privacy violations. This bypasses Apple's restrictions, posing a risk to iPhone users.

Publicly available exploits for a critical Jenkins vulnerability (CVE-2024-23897) allow unauthenticated attackers to read arbitrary files. Another flaw (CVE-2024-23898) involves a cross-site WebSocket hijacking issue, enabling attackers to execute arbitrary CLI commands.

On January 23, the Kansas City Area Transportation Authority (KCATA) experienced a ransomware attack affecting communication systems, with call centers being particularly impacted.

A critical vulnerability has been detected in the 'Better Search Replace' WordPress plugin, affecting versions up to 1.4.4. The flaw, tracked as CVE-2023-6933, allows unauthenticated attackers to execute malicious code through a PHP object injection.

Security researchers at the Pwn2Own Automotive 2024 competition successfully hacked the Tesla infotainment system, showcasing 24 additional zero-days on the second day.

In 2023, cybercriminals stole $1.7 billion from cryptocurrency platforms, a decrease from the previous year. Although the overall amount dropped, the number of incidents increased due to exchange collapses and the declining cryptocurrency value.

Apple has released iOS 17.3 and macOS Sonoma 14.3 updates, addressing 16 documented vulnerabilities, including three urgent WebKit flaws exploited in zero-day attacks. The vulnerabilities expose users to code execution, denial-of-service, and data exposure threats.

Official SEC Twitter account, @SECGov X, fell victim to a SIM swap attack on Jan 9. Attackers hijacked the associated phone number, leading to full account control. Multi-factor authentication was disabled temporarily. Investigation underway to secure against future incidents.