Latest News By Security Parrot
Read More
Carding site BidenCash gives away 1.2 million bank card data for free
The carder darknet resource BidenCash again staged a high-profile "advertising campaign". The site administration published a huge dump containing information about 1,221,551 bank cards for…
Documentation and BIOS leaked for Intel Alder Lake processors
Intel has confirmed the leaked UEFI BIOS documentation and source code for Alder Lake processors (the code name for 12th generation Intel processors that have…
Microsoft Defender mistakenly saw a threat in Chrome and Electron apps
Due to a bug in an update, Microsoft Defender incorrectly identified Google Chrome, Microsoft Edge, Discord, Spotify, and other Electron apps as a Win32/Hive.ZY threat…
Worok hacking group targets Asian governments and companies
ESET analysts have discovered the Worok cyber-espionage group, which has been active since at least 2020. These hackers mainly attack government agencies and well-known companies…
Los Angeles Unified School District hit by ransomware attack
The second largest school district in the US, LAUSD (Los Angeles Unified School District, Los Angeles Unified School District), reported that its IT systems were…
The authorities closed the WT1SHOP marketplace that sold bank cards, credentials and documents
Law enforcement agencies have completed an international operation, as a result of which control over the website and domains of the underground marketplace WT1SHOP was…
PayPal Suspends Flipper Zero Account and Withholds $1.3M
The developers of the “hacker Tamagotchi” Flipper Zero said that for two months now they have not been able to return $ 1.3 million that…
EvilProxy phishing platform offers 2FA bypass for Apple, Google, Microsoft, GitHub and more
Resecurity experts discovered the EvilProxy phishing platform that offers reverse proxies to unskilled attackers and promises to steal authentication tokens to bypass multi-factor authentication (MFA)…
AgainstTheWest claims to have hacked TikTok and WeChat, stealing 2.05 billion records
The AgainstTheWest (aka BlueHornet) group claims to have acquired a huge 790 GB dump after successfully hacking TikTok and WeChat. Allegedly, the hackers managed to…
The CodeRAT developer has published the source code in the public domain
The source code for the CodeRAT remote access trojan has been published on GitHub. This happened after the security researchers identified the malware developer and…
Cisco hacking linked to Russian-speaking hackers
Experts from eSentire have determined that the infrastructure used to attack Cisco in May 2022 was used to compromise an unnamed HR solutions company a…
Hackers hacked Neopets and spent a year and a half in the system
Unknown attackers hacked the Neopets website, which was founded back in 1999 and offers the opportunity to have virtual pets, as well as interact, communicate…
Urgent Chrome patch fixes zero-day vulnerability
Google developers have released Chrome 105.0.5195.102 for Windows, Mac and Linux, where they fixed a 0-day vulnerability that hackers are already exploiting. This is the…
Samsung reported a data breach
Samsung representatives reported that as early as the end of July 2022, the company's systems in the US were compromised. As the investigation showed, the…
Qnap developers fix 0-day vulnerability abused by Deadbolt
Qnap has warned customers about a new wave of DeadBolt ransomware attacks. This time, the malware exploited a zero-day vulnerability in Photo Station, which the…
Google launches open source bug bounty program
Last week, Google introduced a new bug bounty program. This bug bounty is for researchers who discover vulnerabilities in the company's open source projects. Let…
Malware hides in images from the James Webb telescope
Securonix researchers have noticed an interesting malware campaign that distributes malware called GO#WEBBFUSCATOR written in Go. To spread it, hackers use phishing emails, malicious documents,…
RAT ModernLoader is used to distribute miners and infostealers
According to Cisco Talos, between March and June 2022, hackers organized three related campaigns, delivering various malware to compromised machines, including RAT ModernLoader, RedLine Stealer,…
Chrome extensions installed 1.4 million times spoofed user cookies
Analysts at McAfee found five extensions for Google Chrome in the Chrome Web Store that were fraudulent with user data. Specifically, the extensions tracked when…
0ktapus campaign: Twilio hackers attacked over 130 companies
Group-IB specialists have published a detailed report on the 0ktapus campaign. Experts said the recent phishing attacks against Twilio and Cloudflare employees were part of…
Stay Updated!
