A #ransomware gang broke away from the pack. The Gentlemen started as an affiliate using LockBit, Qilin, and Medusa resources. Now it runs its own RaaS program, claims 478 victims, offers affiliates a 90% cut, uses AI to maintain its tools, and can spread across networks when enabled. Read the full story: thehackernews.com/2026/06/th…

🇮🇷 Iran’s IRGC hackers just breached 34 devices across 11 telecom giants—using fake LinkedIn job offers. 👥 They posed as HR, ran “interviews,” then secretly dropped a stealth backdoor called MINIBIKE hidden in Azure traffic. Read → thehackernews.com/2025/09/un…

🚨 New malware CastleLoader is hijacking systems through fake GitHub repos and phishing sites—469 confirmed infections. It spreads stealers and RATs, uses PowerShell, and mimics trusted dev tools. It’s stealthy. It’s spreading. Here’s how it works ↓ thehackernews.com/2025/07/ca…

🚨 Web3 devs targeted with fake AI job interviews — to steal your crypto. Hackers lure victims with sites like “Norlax AI,” then drop malware disguised as a Realtek audio driver. One click = stolen wallets, credentials, and project data. Read → thehackernews.com/2025/07/en…

🚨 Android malware is getting brutal: 🔸AntiDot hijacks 3,775+ phones via fake Google updates 🔸 GodFather runs real banking apps in a fake sandbox 🔸 SuperCard X clones bank cards via NFC 🔸 150K+ spyware app installs from official stores Your phone isn’t safe. Details → thehackernews.com/2025/06/ne…

🚨 New favorite toy of ransomware gangs? A stealthy malware called Skitnet—now seen in live attacks. First sold on dark forums in 2024, it's now powering phishing campaigns from groups like Black Basta in 2025. → Reverse shell via DNS → Evades AV using GetProcAddress → Deploys legit tools like AnyDesk → Modular, stealthy, persistent Learn how it works: thehackernews.com/2025/05/ra…

🚨 New Espionage Alert! A Russian-speaking APT group, Nebulous Mantis, is deploying the stealthy RomCom RAT to target NATO-linked entities, gov agencies, and critical infra — using bulletproof hosting, IPFS, and over 40 remote commands. 🔗 See how it works, who’s behind it, and why it matters now: thehackernews.com/2025/04/ne…

🚨 Think SMS phishing is old news? Think again. A new PhaaS platform called Lucid is hijacking iMessage & Android RCS to dodge filters and hit 169 targets in 88 countries. 💳 Goal? Steal credit cards + PII, at scale. 🔗 Learn more: thehackernews.com/2025/04/lu…

🚨 They’re back. Russian threat group FIN7 is using Anubis—a lightweight Python backdoor that grants full remote access to Windows machines without leaving detectable files. It runs entirely in memory, evades most defenses, and can steal passwords, take screenshots, and exfiltrate data—all masked with Base64 and hosted on compromised SharePoint sites. 🔗 Full analysis: thehackernews.com/2025/04/fi…

🚨 Critical SCADA Flaws — Researchers uncovered 2 critical vulnerabilities (CVSS 9.3) in mySCADA myPRO, allowing attackers to execute system commands & hijack operations. 🔹 CVE-2025-20014 & CVE-2025-20061 🔹 Full Industrial Network Compromise Possible thehackernews.com/2025/03/cr…

🚨 New research reveals Ragnar Loader, a powerful malware used by cybercrime groups like FIN7 and Ragnar Locker. With advanced encryption, PowerShell payloads, and stealth injection, it hides deep within networks for long-term access. Learn how it remains undetected: thehackernews.com/2025/03/fi…

A massive leak of Black Basta's 200,000+ chat messages reveals their tactics, key players, and internal conflicts. The group uses QakBot for access, exploits SMB misconfigurations, and faces growing instability. Get the inside scoop: thehackernews.com/2025/02/le…