/
countries_code:US × victim_sectors:retail × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

Chinese-speaking operator uses Cairn-based autonomous AI agents to breach 100+ e-commerce websites in AIA0001 campaign

A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…

gbhackers.com · high

Gentlemen ransomware uses vulnerable Lenovo and Safetica drivers (BYOVD) to kill security software before encryption

Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…