The Hacker News

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in ...
The Hacker News

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

New phishing attacks use a convincing fake Adobe Reader pages to trick victims

Crooks are deploying cheeky browser-in-the-browser techniques to trick victims into downloading RMM tools.
Tech Times

Four Chinese Spy Groups Hacked US NGOs and Aerospace Firms With Same Exploit Kit

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...

ClickFix moves into the browser and onto WebDAV, Cisco Talos finds

Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...
Tom's Hardware on MSN

GTA Vice City and GTA III return to web browsers after a DMCA takedown

You can play GTA: Vice City and GTA III in your browser right now across pretty much any modern device. The projects are ...
cyberpress

Malicious Chrome Extension Turns the Browser Into a Backdoor for Hackers

Once installed, it can turn Google Chrome or Microsoft Edge into a persistent backdoor for stealing browser data, hijacking ...
BitNewsBot

PEEP malware: Chrome extension hijacks browsers, steals data

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension ...
cyberpress

Hackers Abuse Legitimate Node.js Runtime to Hide Persistent Backdoor in Enterprise Attacks

Attackers persuade employees to accept a remote-control request during screen sharing or to open Quick Assist and provide its ...
IT Security Guru

Huntress Uncovers Phishing Attacks Using Fake Browser Pages and Rogue RMM Tools

Huntress researchers have uncovered two phishing attacks that combined convincing fake browser windows with legitimate remote ...
Security Affairs

Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.