HackRead Media’s Post

AN EXPLOIT USING WINDOWS SHORT-CUT FILES: This large-scale attack "targets Windows users, stealing passwords, browsing history, and crypto wallet" info. The vulnerability allows threat actors to bypass SmartScreen warnings using specially crafted internet shortcut files, leading to the execution of malware without user intervention. Usually what happens in these cases: the bad guys lure victims into clicking a crafted link to a URL file designed to download an LNK file. The LNK file then downloads an executable file containing an HTML Application script. Then once that is executed, it initiates PowerShell code that eventually establishes C2, downloads decoy PDF files for evasion, and a malicious shell injector. This will initiate the malicious activities and send the stolen data back to a C2 server. https://lnkd.in/d7mVqVfz #auguryit #cybersecurity

https://lnkd.in/gJmDr3tW Another great reason to employ EDR cyber security software and URL protection in your email filter. This multi-vector threat can easily slip into your system if the user is rushed or doesn’t look carefully at what they are clicking on. This large-scale attack "targets Windows users, stealing passwords, browsing history, and crypto wallet" info. The vulnerability allows threat actors to bypass SmartScreen warnings using specially crafted internet shortcut files, leading to the execution of malware without user intervention.

2 Factor Authentication. Do you use it? Here is an example of how no one is safe without it. There are several matrices that show how 2 Factor Authentication creates complete havoc for hackers. As an Enterprise Administrator, I get a lot of failed attempts at being hacked. I credit 2 Factor Authentication for over 95% of my defenses. @ CORCORAN INDUSTRIES, INCORPORATED we strive for 100% protection. You see, even the greatest of IT Corporations can be hacked when the proper security matrices are not in use. Call us @ 954-410-6763 and get protected. #hackers #microsoft #windows #apple

🚨 Beware of Fake IT Support Sites Running Malicious PowerShell Scripts! 🚨 Millions of Windows users have been dealing with the 0x80070643 error since January. According to eSentire's Threat Response Unit (TRU), cybercriminals are exploiting that Windows error to spread information-stealing malware through fake IT support sites. These sites are promoted through compromised YouTube channels that are used to add legitimacy to the content. This scam capitalizes on frustrations caused by the 0x80070643 error and the infection starts as early as the web search for “solutions to a Windows Update Error code” by victims. TRU found that threat actors have created numerous fake support sites such as pchelprwizzards[.]com and pchelprwizardsguide[.]com, which offer fake solutions that ultimately lead to malware infections. Other fake support sites include pchelprwizardpro[.]com, pchelperwizard[.]com, and fixedguides[.]com. These fake IT support sites offer two "fixes": You are either asked to copy and run a PowerShell script or to import contents of a Windows Registry file. In any case, malicious PowerShell scripts are run. The result? Your device becomes infected with malware designed to steal credentials, credit card information, browsing history, cryptocurrency wallets, and more. So, remember to always download fixes from trusted sources and avoid searching for “magic fixes” online. Instead use Microsoft’s official tools to fix errors such as the 0x80070643 error. Stay alert and protect your credentials!  💻🔒 What do you do when you encounter an error like that? How do you ensure the security of your devices and data against such threats? #TechNewsThursday #Cybersecurity #Malware #WindowsUpdate

Google Chrome introduces app-bound #encryption for better cookie protection. This new layer of security aims to prevent information-stealing malware from accessing cookies. Learn more: https://lnkd.in/g4U-3vRK By tying encryption to Chrome's identity, attackers must gain system privileges to bypass this protection. #Cybersecurity

Kali Linux Tools: Passwordless Authentication Should Become Mainstream by 2023 Tool Details: https://lnkd.in/dqggMdV Since the days of Ancient Rome and Egypt, people have used passwords to authenticate and grant access. Nowadays, passwords are more common than ever. From Netflix to Amazon and all the other online platforms, the average person has 90 online accounts. #cybersecurity #informationsecurity #kalilinux #kalilinuxtools 

ShrinkLocker Uses Windows BitLocker Utility To Infect Computers: Hackers exploit the Windows BitLocker tool, as this utility offers a very powerful tool for selectively encrypting access to the system or data, which helps lock users out.                                                    Attackers can use BitLocker to encrypt the victim’s files, making them inaccessible without the key. Then, they ask for money before revealing the key. Then, they ask […] The post ShrinkLocker Uses Windows BitLocker Utility To Infect Computers appeared first on Cyber Security News. #CyberSecurity #InfoSec