A significant cybersecurity incident has come to light involving the Popup Builder plugin used in WordPress, which has been compromised by a malware strain known as Balada Injector. This issue endangers thousands of WordPress websites operating on vulnerable versions of the plugin. Initially documented by Doctor Web at the beginning…
Newegg Faces Data Breach Amid Magecart Attacks In a significant cybersecurity incident, the infamous Magecart hacking group has breached the website of Newegg, a leading U.S.-based retailer specializing in computer hardware and consumer electronics. The attack, which occurred between August 14 and September 18, 2018, allowed hackers to extract credit…
Facebook’s Recent Security Vulnerability Exposes User Information A new security vulnerability in Facebook has been identified, threatening the privacy of users and their friends by potentially exposing personal information. This flaw was discovered by researchers at Imperva, who found that the issue lies within the Facebook search functionality, specifically how…
Client Challenge JavaScript is disabled in your browser. Please enable JavaScript to proceed. A critical component of this site failed to load. This issue may stem from browser extensions, network connectivity problems, or specific settings in your browser. We recommend checking your connection, disabling any ad blockers, or attempting to…
Recent Threats Targeting WordPress Sites via Distributed Brute-Force Attacks Recent findings from cybersecurity firm Sucuri have unveiled a significant threat facing WordPress website owners. A new wave of brute-force attacks has emerged, employing malicious JavaScript injections that exploit unknowing visitors’ browsers. The research indicates that these attacks constitute distributed brute-force…
Significant Malware Campaign Targets WordPress Sites A recent and extensive malware campaign known as Sign1 has compromised over 39,000 WordPress sites over the past six months. The malware employs malicious JavaScript injections, maneuvering to redirect users to fraudulent websites. Notably, within the last two months, this campaign has infected an…
Cybersecurity experts have uncovered a sophisticated campaign targeting vulnerable Tibetan communities around the world, involving the deployment of a malicious Firefox browser extension to gain unauthorized access to Gmail accounts. This operation is attributed to threat actors aligned with Chinese governmental interests, specifically a group identified as TA413. In a…
The Gootkit malware framework, which has been recognized for distributing banking Trojans, has recently undergone significant enhancements that enable it to deliver a broader spectrum of malicious software, including ransomware variants. According to researchers from Sophos, Gabor Szappanos and Andrew Brandt, the Gootkit malware family has been in existence for…
Recent developments have shed light on a critical vulnerability found in Microsoft Edge, which, although patched, posed significant risks to users. This flaw had the potential to allow attackers to covertly install unauthorized browser extensions on users’ systems, facilitating various malicious activities without their consent. Oleg Zaytsev, a security researcher…
