[email protected] (The Hacker News)

Articles by [email protected] (The Hacker News)

Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks

Crypto December 18, 2025

A new distributed denial-of-service (DDoS) botnet known as Kimwolf has enlisted a massive army of no less than 1.8 million infected devices comprising Android-based TVs, set-top boxes, and tablets, aοΏ½...

Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign

Crypto December 17, 2025

An ongoing campaign has been observed targeting Amazon Web Services (AWS) customers using compromised Identity and Access Management (IAM) credentials to enable cryptocurrency mining. The activity, οΏ½...

Rogue NuGet Package Poses as Tracer.Fody, Steals Cryptocurrency Wallet Data

Crypto December 17, 2025

Cybersecurity researchers have discovered a new malicious NuGet package that typosquats and impersonates the popular .NET tracing library and its author to sneak in a cryptocurrency wallet stealer. οΏ½...

Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector

Crypto December 16, 2025

Cybersecurity researchers have disclosed details of an active phishing campaign that's targeting a wide range of sectors in Russia with phishing emails that deliver Phantom Stealer via malicious ISO οΏ½...

VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption

Crypto December 16, 2025

The pro-Russian hacktivist group known as CyberVolk (aka GLORIAMIST) has resurfaced with a new ransomware-as-a-service (RaaS) offering called VolkLocker that suffers from implementation lapses in tesοΏ½...

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

Crypto December 14, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity flaw impacting Sierra Wireless AirLink ALEOS routers to its Known Exploited Vulnerabilities (KEV) cataοΏ½...

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

Crypto December 13, 2025

Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAοΏ½...

New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale

Crypto December 13, 2025

Cybersecurity researchers have documented four new phishing kits named BlackForce, GhostFrame, InboxPrime AI, and Spiderman that are capable of facilitating credential theft at scale. BlackForce, fiοΏ½...

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

Crypto December 13, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged federal agencies to patch the recent React2Shell vulnerability by December 12, 2025, amid reports of widespread exploitationοΏ½...

ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit β€” and 20 More Stories

Crypto December 12, 2025

This week's cyber stories show how fast the online world can turn risky. Hackers are sneaking malware into movie downloads, browser add-ons, and even software updates people trust. Tech giants and goοΏ½...