The Hacker News دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۱۶

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026. According to a report published by Dream Research Labs, the campaign has led to the compromise of a high-profile individual in Israel, along with additional compromises affecting a government cloud

هوش تهدید

خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۹:۲۰

Google disrupts XCPE botnet, bans the company behind it

Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high confidence to Videostrong Technology, the company that manufactured many of those boxes. More than 1.3 million devices were enrolled. XCPE malware overview (Source: Google) Access The business model was access. Researchers say the company sold e…

بدافزار و آلودگی بات‌نت و DDoS امنیت اینترنت اشیا و صنعتی

منبع

The Hacker News دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۹:۲۰

Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to criminals. They used the boxes for ad fraud and to pass other people's internet traffic through owners' home

بدافزار و آلودگی بات‌نت و DDoS توسعه موبایل

منبع

HackRead دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۷:۳۱

BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware

FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware.

بدافزار و آلودگی هوش تهدید سیستم‌عامل

منبع

Google Threat Intelligence دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۷:۳۰

The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources

Written by: Christopher Romano, Codi Starks, John Wolfram, Josh Murchie, Mathew Potaczek, Garrett Mahoney, Mike Lombardi, K Singh, Rik Dolfing Introduction Mandiant responded to multiple incidents in 2026 in which threat actors hijacked enterprise access to Large Language Models (LLMs), a tactic known as "LLMJacking." Spanning a variety of cloud and LLM providers, these intrusions impacted organizations in North Amer…

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ

منبع