Think, Talk, Hack

Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks

Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri reveal. The attacks, which take the form of distributed brute-force attacks, “target WordPress websites from the browsers of completely innocent and unsuspecting site visitors,” security researcher Denis Sinegubko said. The activity is part of a previously documented […]

root

NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

Cybersecurity researchers have discovered a new Java-based “sophisticated” information stealer that uses a Discord bot to exfiltrate sensitive data from compromised hosts. The malware, named NS-STEALER, is propagated via ZIP archives masquerading as cracked software, Trellix security researcher Gurumoorthi Ramanathan said in an analysis published last week. The ZIP file contains within it a rogue […]

root

NodeStealer Malware Now Targets Facebook Business Accounts on Multiple Browsers

An ongoing campaign is targeting Facebook Business accounts with bogus messages to harvest victims’ credentials using a variant of the Python-based NodeStealer and potentially take over their accounts for follow-on malicious activities. “The attacks are reaching victims mainly in Southern Europe and North America across different segments, led by the manufacturing services and technology sectors,” […]

root

New Mystic Stealer Malware Targets 40 Web Browsers and 70 Browser Extensions

A new information-stealing malware called Mystic Stealer has been found to steal data from about 40 different web browsers and over 70 web browser extensions. First advertised on April 25, 2023, for $150 per month, the malware also targets cryptocurrency wallets, Steam, and Telegram, and employs extensive mechanisms to resist analysis. “The code is heavily […]

root

New Bandit Malware Attacks Browsers to Steal Personal & Financial Logins

Bandit Stealer, a recently discovered information stealer by Trend Micro, effectively targets cryptocurrency wallets and web browsers while skillfully avoiding detection. The malware prioritizes Windows as its target and leverages the legitimate command-line tool runas[.]exe to execute programs under different user permissions. The objective is to elevate privileges, gain administrative access, and bypass security measures […]

root

New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers

A novel credential-stealing malware called Zaraza bot is being offered for sale on Telegram while also using the popular messaging service as a command-and-control (C2). “Zaraza bot targets a large number of web browsers and is being actively distributed on a Russian Telegram hacker channel popular with threat actors,” cybersecurity company Uptycs said in a […]

root

This flaw in Google Chrome & Chromium-based browsers enabled data theft of information such as cryptocurrency wallets and credentials from over 2.5 billion users

Researchers from the cyber security firm Imperva Red Team have disclosed information on a newly found and fixed vulnerability that affected over 2.5 billion Google Chrome users as well as all Chromium-based browsers such as Edge and Opera. The vulnerability, which is identified as CVE-2022-3656, makes it possible for remote attackers to acquire sensitive user […]

root

Experts Warn of Rise in ChromeLoader Malware Hijacking Users’ Browsers

A malvertising threat is witnessing a new surge in activity since its emergence earlier this year. Dubbed ChromeLoader, the malware is a “pervasive and persistent browser hijacker that modifies its victims’ browser settings and redirects user traffic to advertisement websites,” Aedan Russell of Red Canary said in a new report. ChromeLoader is a rogue Chrome […]

root

TOP 10: The best web browsers for cybersecurity specialists

Search engines are one of the most widely used computer tools worldwide, since any user can access the Internet regardless of their level of computer knowledge. Although tools such as Chrome, Edge or Firefox are the best known, other web browsers offer other kinds of functions and protections. This time, cybersecurity awareness experts from the […]

root

Malvertising campaign affects users of Safari and Chrome browsers

A malvertising campaign operator group known as ScamClub has long exploited an unpatched zero-day vulnerability in some WebKit-based web browsers in order to bypass security mechanisms and redirect unsuspecting users to malicious websites where gift card stays. The term malvertising refers to injecting malware into online advertising in order to deploy subsequent attacks. Threat actors […]

root

FTCODE Ransomware Attack Windows To Encrypt Files & Steals Stored Login Credentials From Browsers

Researchers discovered a new wave of FTCODE ransomware campaign that steal browsers login credentials and Encrypt files in Windows systems. FTCODE ransomware was first observed in 2013, it uses the Windows PowerShell program to perform file encryption. The ransomware resurfaced again starting from last year September, according to Certego analysis of the FTCODE ransomware, it […]

root

New Malware Attack Drops Double Remote Access Trojan in Windows to Steal Chrome, Firefox Browsers Data

Researchers discovered a new malware campaign that drops two different Remote Access Trojan(RAT) on targeted Windows systems and steal sensitive information from popular browsers such as Chrome and Firefox. The samples that uncovered by Fortinet researchers drop the RevengeRAT and WSHRAT malware and it has various obfuscation functionalities that use the various stage to maintain […]

root

Hackers found tracking web traffic of Chrome and Firefox browsers

Two user favorite browsers are commonly known to be Google Chrome and Mozilla Firefox. Exploiting their demand, a Russian group by the handle of Turla has been attempting to track encrypted traffic of both browsers. With targets identified in Russia and Belarus; they do so by attacking the systems through a remote access trojan (RAT) […]

root

4 browsers for safe anonymous surfing

Internet comes with full of productivity & entertainment solutions. Being anonymous is very difficult now days. Because of increasing cyber crimes & frauds online. According to ethical hacking researcher of international institute of cyber security users cannot get complete anonymity online but can take some precautions for hiding true their identity. Epic Browser Epic is […]

root

Mobile Browsers’ Google Safe Browsing Flaw In 2018 Revealed

Google Safe Browsing system has been implemented by the Google search engine for more than a decade now, designed to block known websites harboring malware or phishing attempts against visitors. It is very efficient, given that Google has the most advanced web crawlers that index the web, marking as websites with harmful contents with a […]

root

Best Secure Browsers that Protect Your Privacy

A secure browser that protects your privacy is absolutely essential for staying safe online and keeping your data secure from third parties. Unless properly configured, most browsers contain vast amounts of private information that can potentially be exploited – or simply collected – by third parties: Browsing history: all the websites you visit Login credentials: […]

root

Someone is watching you? Check your mobile browsers today

In today’s digital life privacy matters a lot for any user. Especially, if the user is surfing internet using any web browser. There are many ways that user can protect himself for revealing his privacy on the internet. And there are many ways that your web browser knows more about your computer than you, demonstrated […]

root

11 Best Web Browsers For Windows To Access Your Favorite Sites In 2019

If you’re searching for the best web browser for 2019, you might have landed on the right web page. Apparently, using a web browser. We can call web browsers a door to the information space we know as the world wide web, not the internet (See the difference in our detailed post). All you have to […]

root

BFuzz – Fuzzing Browsers (Chrome & Firefox)

BFuzz is an input based fuzzer tool which take .html as an input, open’s up your browser with a new instance and pass multiple testcases generated by domato which is present in recurve folder of BFuzz, more over BFuzz is an automation which performs same task repeatedly. Run BFuzz [email protected]:~/BFuzz$ ./generate.sh [email protected]:~/BFuzz$ python BFuzz.py Enter […]

root