Multiple malicious domains registered to resemble ChatGPT have been discovered by cybersecurity researchers at ESET. Hackers are exploiting the credibility of the ChatGPT model to deceive users into trusting fraudulent websites. They are using the model’s reputation to trick individuals into revealing sensitive information or downloading malicious content. The Russian ransomware group Cl0p recently launched a massive campaign using a zero-day vulnerability in MOVEit, and they are now leaking data on the open web if the ransom isn’t paid. The FBI has noted that ransomware attacks are evolving with multi-variant attacks and the use of wipers following data theft and encryption. Cybersecurity researchers have also found and disabled the Mozi botnet, which had been one of the largest in the world for three years. Android devices are being targeted for DDoS attacks by the new threat Android/Pandora. Insecure handling of OpenAI API keys and the use of Android spyware are also significant threats. Additionally, there has been a surge in three-year-old JS/Agent and persistent Magecart attacks on unpatched websites. Cryptostealers, such as Lumma Stealer, are also increasing in prevalence, targeting crypto wallets. It is essential for developers and admins to implement better security measures to prevent these threats.
Over 650K harmful domains crafted to mimic ChatGPT.
Latest from Blog
Cyberattack hits Selenium Grid for Crypto Mining – stay safe
Ongoing Cyberattack Targets Exposed Selenium Grid Services TLDR: Cyberattack targeting older versions of Selenium for crypto mining Threat actors using Selenium Grid services for illicit activities Cybersecurity researchers are warning about an
Bridging the cyber talent gap: tips for CISOs
TLDR: – Global cyber threats have increased twofold in recent years, leading to a talent gap of nearly 4 million cyber professionals worldwide. – Existing cyber staff are under strain, with vacancies
Deepfake dangers prompt urgent cybersecurity reevaluations for businesses
TLDR: AI-generated deepfake attacks are on the rise, leading companies to reassess their cybersecurity measures. Companies are developing deepfake response plans and running simulations to increase preparedness. Biometric authentication, once considered secure,
North Korean faces charges for cyberattacks on US targets
TLDR: A North Korean military intelligence operative has been indicted for orchestrating cyberattacks on U.S. hospitals, NASA, and military bases. Rim Jong Hyok, a member of the Andariel Unit, faces charges of
Analysts predict cybersecurity stocks will soar after CrowdStrike’s outage
“`html TLDR: CrowdStrike outage led to potential gains for cybersecurity rivals SentinelOne, Palo Alto Networks, and Microsoft’s cybersecurity business could benefit After a defective CrowdStrike update caused a global tech outage, analysts
Bitsight’s Trust Management Hub: Revolutionizing Security Assessment Process
TLDR: Bitsight has released Trust Management Hub to streamline security assessments. The new solution reduces workload by 25% and improves the assessment cycle by 85%, helping teams close deals faster. Bitsight, a
North Korean hackers pivot to ransomware attacks
TLDR: North Korean hackers from APT45 have shifted from cyber espionage to ransomware attacks APT45 has targeted critical infrastructure and is linked to ransomware families SHATTEREDGLASS and Maui A North Korea-linked threat
Europe’s telecom, electricity sectors evaluated in new EU cybersecurity report
TLDR: EU releases risk assessment report on cybersecurity in telecommunications and electricity sectors Report highlights supply chain risks, shortage of cybersecurity professionals, and threats from cybercriminals and state-sponsored actors Summary: The European
Cyber insurance evolves to cover all your online needs
TLDR: Cyber insurance coverage is evolving to help raise security baselines across businesses. Only one-quarter of companies have a standalone cyber insurance policy. In today’s evolving cybersecurity landscape, cyber insurance coverage is
Study: CrowdStrike slashes losses, Fortune 500 set to save $54B
TLDR: Key Points: CrowdStrike outage will cost Fortune 500 $5.4 billion Cyber insurance will only cover 10-20% of losses In a report by Parametrix, it is estimated that the global IT outage