New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint
A newly uncovered ClickFix phishing campaign is tricking victims into executing malicious PowerShell commands that deploy the ...
The Hacker News1d
Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites
Threat actors use ClickFix to spread Havoc C2 malware via SharePoint and Microsoft Graph API, while scammers exploit Google ...
Samaa2h
Advisory issued for organisations to protect against deceptive PDFs and malicious websites
National CERT recommended several urgent security measures to mitigate the risk of these attacks. Organizations were advised ...
Windows Latest1h
Turn on JPEG-XL (.jxl) in Windows 11 24H2, a secret new feature
Windows 11 24H2 quietly gets JPEG XL support. Microsoft adds jxl image extension via the Store, promising better compression ...
Microsoft Teams tactics, malware connect Black Basta, Cactus ransomware
New research has uncovered further links between the Black Basta and Cactus ransomware gangs, with members of both groups ...
The Hacker News15h
Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates
Threat actors deploying the Black Basta and CACTUS ransomware families have been found to rely on the same BackConnect (BC) ...
HHS22h
Russian-Speaking Hackers Goad Users into Installing Havoc
A newly discovered phishing campaign is using social engineering to dupe victims into copying, pasting, and running the Havoc ...
Security Boulevard6h
We’re losing — but it can’t get any worse, right?
We’re losing — but it can’t get any worse, right?LLMs are being used in many ways by attackers; how blind are you?We’re ...
NCERT Warns Against Hackers Using Fake CAPTCHA, PDF Files to Inject Malware
The National Computer Emergency Response Team (National CERT) has issued an advisory warning against a phishing campaign that uses fake CAPTCHA images in ...
5,000 CAPTCHA Tests Used As Infostealer Gateways—Do Not Complete Them
As 5,000 fake “I Am Not A Robot” tests are deployed as part of a large-scale password hacking campaign, users warned: Do not ...
cryptopolitan5d
Microsoft’s AI tool Copilot gives instructions to pirate Windows 11
A Redditor asked Microsoft’s Copilot if there was a script to activate Windows 11, and the Copilot outlined the instructions.
Microsoft SharePoint hijacked to spread Havoc malware
Havoc is a post-exploitation framework designed for advanced red teaming and adversary simulation, providing modular ...