TheNde
Security· · 2 min

Malware Madness.

Cybersecurity is buzzing with malware attacks, marketplace shutdowns, and new vulnerabilities. Today’s news highlights the ongoing battle between malicious actors and security measures. Stay alert—there's a lot to unpack.

In brief
  1. Malware Madness
  2. Marketplace Mayhem
  3. Vulnerabilities on the Rise
01 · Security

Malware Madness

Malicious ads are misleading users to malware.
Malicious ads are misleading users to malware.

Hackers are getting crafty. Google Ads and Claude.ai are being weaponized to peddle Mac malware. Users searching for legitimate downloads are led to malicious scripts that install harmful software without any warning.

Meanwhile, the JDownloader site was hacked to distribute Python RAT malware. Downloads from the official site turned into a supply chain nightmare between May 6 and May 7. If you downloaded during that window, you might want to check your system.

02 · Security

Marketplace Mayhem

Police arrest the admin of the Crimenetwork marketplace.
Police arrest the admin of the Crimenetwork marketplace.

Law enforcement strikes again! The rebooted Crimenetwork marketplace was shut down by German authorities, arresting its admin in Spain. This platform had generated over 3.6 million euros and had 100,000 users before its demise.

The swift action highlights how quickly cybercriminals attempt to re-establish operations after being taken down. This cat-and-mouse game continues to escalate.

03 · Security

Vulnerabilities on the Rise

cPanel and WHM have issued crucial patches.
cPanel and WHM have issued crucial patches.

cPanel and WHM have rolled out patches for three new vulnerabilities. If you’re running these platforms, now’s the time to update. Ignoring these fixes could leave your systems wide open to attacks.

An Ollama vulnerability also allows for a remote memory leak—another reminder that even established systems aren't safe. Stay proactive.

Key numbers
€3.6M

Revenue generated by the Crimenetwork marketplace before its shutdown.

Source
244,000

Downloads of the malicious Hugging Face repository before its removal.

Source
3

Number of new vulnerabilities patched in cPanel and WHM.

Source
Top stories
BleepingComputer

Police Shut Down Crimenetwork Marketplace

German authorities have dismantled the Crimenetwork marketplace, arresting its operator. This platform was a central hub for cybercrime, generating millions.

BleepingComputer

Hackers Exploit Google Ads for Malware Distribution

Hackers are using Google Ads to mislead users into downloading malware disguised as legitimate software. The campaign highlights the creative tactics used by cybercriminals.

BleepingComputer

Supply Chain Attack on JDownloader

The JDownloader site was compromised, leading to the distribution of malware through its installers. Users who downloaded during the breach are at risk.

Quick links
  1. Fake OpenAI Repository on Hugging FaceA malicious repository on Hugging Face impersonated OpenAI, resulting in the distribution of infostealer malware. — BleepingComputer
  2. Costa Rican Government Joins Have I Been PwnedCosta Rica's government is now part of the Have I Been Pwned initiative, enhancing its cybersecurity posture. — Troy Hunt
  3. Weekly Update 503Troy Hunt updates on the latest cybersecurity threats and incidents, including an ongoing ransom situation. — Troy Hunt
  4. Ollama Out-of-Bounds Read VulnerabilityA vulnerability in Ollama allows for remote memory leaks, posing a risk to users. — The Hacker News
  5. cPanel, WHM Release Fixes for VulnerabilitiescPanel and WHM have released critical patches for newly discovered vulnerabilities. — The Hacker News