Tag: hacker
-
Asos says customers’ names, contact details and search histories hacked
Experts say breadth of data accessed could help attackers devise “highly convincing” phishing scams<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Asos hackers gained access to millions of customers’ recent search histories as well as names, addresses and phone numbers, the online fashion retailer has revealed.Terms typed in by customers such as “glamorous wide fit” and “Asos petite” were…
-
Uranium crypto exchange hacker convicted for stealing $53 million
A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uranium-crypto-exchange-hacker-found-guilty-of-53-million-theft/
-
Asos says hacker accessed customers’ names, contact details and search histories
Millions of users’ personal data is said to have been compromised but not card details or passwords <ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Asos hackers gained access to millions of customers’ recent search histories as well as names, addresses and phone numbers, the online fashion retailer has revealed.Terms typed in by customers such as “glamorous wide fit”…
-
Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms
Russian-aligned hackers have targeted Ukrainian transportation, manufacturing and energy companies with a constantly evolving malware strain designed to harvest system data, according to new research. First seen on therecord.media Jump to article: therecord.media/russia-ukraine-malware-transportation
-
Angebliche Premium-Smartphones entpuppen sich als Malware-infizierte Niedrigpreisangebote
Mit kostengünstigen Smartphones laufen Nutzer Gefahr, sich vorinstallierte Malware einzukaufen. Davor warnen die Experten der Bitdefender Labs in einer aktuellen Studie. Im Rahmen der Kampagne ‘Midnight Mimosa” vertreiben Hacker Schadsoftware auf günstigen Android-Smartphones. Die Malware ist dabei Teil der Firmware, läuft mit Privilegien auf Systemebene und lässt sich mit herkömmlichen Methoden nicht entfernen. In der…
-
Asos customers’ names, search histories and contact details accessed in hack, says retailer
Hackers gained access to millions of users’ personal data, but not card details or passwords, Asos says<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Asos hackers gained access to millions of customers’ recent search histories as well as names, addresses and phone numbers, the online fashion retailer has revealed.Terms typed in by customers such as “glamorous wide fit” and…
-
Chinese Hacker Deployed AI in Campaign Against South Korean Banks
CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/
-
U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
The U.S. offers $10M for Zhang Yu, accused of helping run HAFNIUM attacks that compromised thousands of organizations worldwide. The U.S. State Department is offering a $10 million reward for information leading to the arrest of Zhang Yu. He is accused of being a key figure in the HAFNIUM campaign, the 2021 operation that targeted…
-
Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets
Tags: ai, breach, china, cyber, data-breach, finance, hacker, infrastructure, open-source, penetration-testing, toolA financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September to early October 2026, the operation combined ARTEX, an open-source penetration testing platform developed in China, with multiple large language models. Researchers recovered exposed operational files that documented the attacker’s infrastructure, prompts, and…
-
Hackers Target Hotels With Fake Guest Complaints to Deploy Blockchain-Based RAT Malware
Hackers are targeting hotels with fabricated guest complaints and negative reviews to distribute EtherRAT and TONResolver, two malware families that abuse public blockchains to locate their command-and-control infrastructure. The activity appears to extend earlier Booking. com-themed phishing operations, although Cofense assesses that connection with moderate confidence. Similar email templates and accommodation-sector targeting link the campaigns.…
-
Asos says customer data accessed by hacker posing as trusted contact
Customers are told payment details and passwords were not compromised when employee account was breached<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Hackers gained access to Asos customer names and contact details by impersonating a “trusted contact” to gain access to one of its employee’s accounts, the retailer has said.Thousands of users of the online fashion seller’s app <a…
-
Gekaperte Top-Level-Domains: Hacker erstellen gefälschte TLS-Zertifikate für Google
Unbekannte hacken mehrere Ländercode-Top-Level-Domains. Damit umgehen sie übliche Gültigkeitsprüfungen für die Ausstellung der Zertifikate. First seen on golem.de Jump to article: www.golem.de/news/gekaperte-top-level-domains-hacker-erstellen-gefaelschte-tls-zertifikate-fuer-google-2610-213860.html
-
U.S. Offers $10 Million Reward for Chinese Hacker Behind Alleged COVID-19 Research Cyberattacks
The U.S. Department of State is offering a reward of up to $10 million for information regarding Zhang Yu, a Chinese national accused of participating in cyberattacks that targeted American COVID-19 research. This initiative, part of the Rewards for Justice program, seeks information about Zhang, his associates, and their malicious cyber activities. Zhang is alleged…
-
Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The workflows targeted 2,577 secrets, but targeting did not always translate into theft. Researchers confirmed successful exfiltration of 26 secrets from 13 repositories, highlighting the distinction between malicious injections and executed payloads. Attackers inserted…
-
Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The workflows targeted 2,577 secrets, but targeting did not always translate into theft. Researchers confirmed successful exfiltration of 26 secrets from 13 repositories, highlighting the distinction between malicious injections and executed payloads. Attackers inserted…
-
Qilin-Hacker nach Deutschland ausgeliefert
Ein mutmaßliches Mitglied der Hackergruppe Qilin ist an Deutschland überstellt worden. Dem Russen wird ein Angriff auf ein deutsches Logistikunternehmen vorgeworfen. First seen on golem.de Jump to article: www.golem.de/news/ransomware-qilin-hacker-nach-deutschland-ausgeliefert-2610-213843.html
-
US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
U.S. officials say Zhang Yu was a prominent figure in the Hafnium campaign, which saw hackers breach thousands of computers and steal troves of documents. First seen on therecord.media Jump to article: therecord.media/accused-hafnium-hacker-zhang-yu-10million-reward
-
Arizona courts say hackers stole info on more than 1.3 million people
The investigation into the incident revealed cybercriminals were able to breach the Fines/Fees and Restitution Enforcement (FARE) Program, a statewide program that helps the court collect outstanding debts tied to traffic and criminal violations. First seen on therecord.media Jump to article: therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million
-
Attackers Hijack Asos App to Say Store is Hacked
Asos Lost Control of its Story to ‘Advanced Persistent Teenagers’. Fanciers of fast-fashion online retailer Asos received an unusual notification from the store app Tuesday, apparently sent by the hackers who hacked the British company. ASOS HACKED popped up on the app mid-morning, according to multiple users across the United Kingdom. First seen on govinfosecurity.com…
-
Goldenes Trump Phone: Hacker veröffentlichen Kundendaten von Trump Mobile
Die Hackinggruppe hat wohl noch immer Zugriff auf die Systeme von Trump Mobile. Die nutzten nicht einmal eine Zweifaktor-Authentifizierung. First seen on golem.de Jump to article: www.golem.de/news/goldenes-trump-phone-hacker-veroeffentlichen-kundendaten-von-trump-mobile-2610-213834.html
-
Hackers exploit critical Atlassian flaw after public PoC release
A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/
-
Pwn2Own: Hacker knacken Samsung Galaxy S26 und Philips Hue Bridge
Neue Zero-Day-Lücken gibt es auch in KI-Diensten und Druckern. Insgesamt zeigen Forscher am ersten Tag des Wettbewerbs 32 Bugs. First seen on golem.de Jump to article: www.golem.de/news/pwn2own-hacker-knacken-samsung-galaxy-s26-und-philips-hue-bridge-2610-213819.html
-
Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/google-unauthorized-https-certificates-cctld-hijacks/
-
Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/google-unauthorized-https-certificates-cctld-hijacks/
-
Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches
Attackers breached two of South Korea’s largest churches through distinct intrusion chains, combining an ERP web shell, privileged database access, leaked credentials, and broken authorization controls. Oasis Security’s analysis of attacker-server files documents extensive collection of congregant, employee, financial, and administrative information across both organizations. Its findings describe recovered attacker artifacts, rather than a complete…
-
LUNEXSTEALER Gives Hackers Remote Control of Browsers Through Malicious Chrome Extension
A campaign that uses more than 100 compromised websites to distribute LUNEXSTEALER, a Windows infostealer that installs a browser extension giving attackers remote control. The extension, LUNARAXE, masquerades as “Microsoft Office Word Editor” inside Chromium-based browsers. Beyond stealing cookies, browsing history, and credentials entered into forms, it enables operators to execute JavaScript within webpages, manipulate…
-
ASOS confirms data breach after >>hacked<< app alert reaches shoppers
UK fashion retailer ASOS has confirmed a data breach after a notification claiming hackers had broken into its data was sent to shoppers through its app. ASOS was founded in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/asos-data-breach-app-notification/
-
Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/pwn2own-hackers-32-zeroday/