VN Hacker News

15/04/2026

We Dumped a Live Kimsuky C2 and Recovered Every Stage of the Kill Chain: CHM Dropper, VBScript Stager, PowerShell Keylogger

On April 11, 2026, we picked up a CHM file tagged Kimsuky from MalwareBazaar and walked the infrastructure. The C2 server at check.nid-log.com had directory listing enabled and was serving payloads to anyone who asked. We recovered the complete source code of all three attack stages before the actor...

15/04/2026

Inside an AI‑enabled device code phishing campaign

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation. This campaign goes beyond traditional phishing by generating live authentication codes on demand, enabling higher success rates and sustained post‑compromise access.

06/04/2026

https://cloudbrothers.info/en/exploit-kerberos-samaccountname-spoofing/

When Microsoft released the November 2021 patches, the following CVEs caught the eye of many security professionals because they allow impersonation of a domain controller in an Active Directory environment. CVE-2021-42278 - KB5008102 Active Directory Security Accounts Manager hardening changes CVE-...

03/04/2026

Analysis of Android FvncBot banker campaign targeting Polish users

CERT Polska has analyzed an SGB-branded Android malware sample from the FvncBot campaign targeting Poland. The app installs a second-stage implant, coerces the victim into enabling accessibility, and registers the device to a backend that issues per-device credentials.

03/04/2026

Malware development series: How to use ROP to inject a DLL into a remote thread

How to use ROP to inject a DLL into a remote thread

02/04/2026

Fake VS Code Security Alerts on GitHub Spread Malware in Massive Phishing Attack

Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.

01/04/2026

SSL pinning bypass setup for iOS (No Jailbreak) using OpenVPN + iptables traffic redirection to proxy (Burp Suite / mitmproxy)

SSL pinning bypass setup for iOS (No Jailbreak) using OpenVPN + iptables traffic redirection to proxy (Burp Suite / mitmproxy) - SahilH4ck4you/iOS-SSL-pinning-bypass-without-jalibreak

01/04/2026

Decompiling an Android Application Written in .NET MAUI 9 (Xamarin)

.NET MAUI, as the successor to Xamarin, enables the development of cross-platform applications, including Android, using C #. In previous versions (up to .NET MAUI 8), applications stored their DLL libraries in assemblies.blob and assemblies.manifest files, making extraction and analysis easier. Tool...

22/09/2025

Violent Attack Vectors in Web3: A Detailed Review
https://x.com/officer_cia/status/1963610191254999509?5676

22/09/2025

In the latest newsletter, we break down real DNS attacks, compare registrars, and give a step-by-step to keep your domains from being hijacked.

https://web3secnews.substack.com/p/the-hidden-dns-threats-that-could