セキュリティ· · 2分Malware Madness.
Cybersecurity is buzzing with malware attacks, marketplace shutdowns, and new vulnerabilities. Today’s news highlights the ongoing battle between malicious actors and security measures. Stay alert—there's a lot to unpack.
Malware Madness
Hackers are getting crafty. Google Ads and Claude.ai are being weaponized to peddle Mac malware. Users searching for legitimate downloads are led to malicious scripts that install harmful software without any warning.
Meanwhile, the JDownloader site was hacked to distribute Python RAT malware. Downloads from the official site turned into a supply chain nightmare between May 6 and May 7. If you downloaded during that window, you might want to check your system.
Marketplace Mayhem
Law enforcement strikes again! The rebooted Crimenetwork marketplace was shut down by German authorities, arresting its admin in Spain. This platform had generated over 3.6 million euros and had 100,000 users before its demise.
The swift action highlights how quickly cybercriminals attempt to re-establish operations after being taken down. This cat-and-mouse game continues to escalate.
Vulnerabilities on the Rise
cPanel and WHM have rolled out patches for three new vulnerabilities. If you’re running these platforms, now’s the time to update. Ignoring these fixes could leave your systems wide open to attacks.
An Ollama vulnerability also allows for a remote memory leak—another reminder that even established systems aren't safe. Stay proactive.
Police Shut Down Crimenetwork Marketplace
German authorities have dismantled the Crimenetwork marketplace, arresting its operator. This platform was a central hub for cybercrime, generating millions.
Hackers Exploit Google Ads for Malware Distribution
Hackers are using Google Ads to mislead users into downloading malware disguised as legitimate software. The campaign highlights the creative tactics used by cybercriminals.
Supply Chain Attack on JDownloader
The JDownloader site was compromised, leading to the distribution of malware through its installers. Users who downloaded during the breach are at risk.
- Fake OpenAI Repository on Hugging FaceA malicious repository on Hugging Face impersonated OpenAI, resulting in the distribution of infostealer malware. — BleepingComputer
- Costa Rican Government Joins Have I Been PwnedCosta Rica's government is now part of the Have I Been Pwned initiative, enhancing its cybersecurity posture. — Troy Hunt
- Weekly Update 503Troy Hunt updates on the latest cybersecurity threats and incidents, including an ongoing ransom situation. — Troy Hunt
- Ollama Out-of-Bounds Read VulnerabilityA vulnerability in Ollama allows for remote memory leaks, posing a risk to users. — The Hacker News
- cPanel, WHM Release Fixes for VulnerabilitiescPanel and WHM have released critical patches for newly discovered vulnerabilities. — The Hacker News
この号は役に立ちましたか？
ワンクリックで次号の改善に役立ちます。