news
Breaking Cyber News From Cyberint
Breaking news feed of the latest cyber incidents, breaches, vulnerabilities, malware, ransomware and so much more.
- All Items
- Handala
- Middle East
- Data Encrypted For Impact
- Israel
- Business Services
- Asia
- Jobinfo
- Shelter Locations In Israel
- Saudi Games
- Retail
- Cyber Fattah Team
- Saudi Arabia
- Ben Horin & Alexandrovitz
- Zachary Levi And Sons - Construction
- Sivim It
- Government
- Kibbutz Almog
- Manufacturing
- Saban Brands Israel
- Mprest
- Digitalghost
- The Knesset
- Evil_Byte
- Gonjeshke Darande
- Nobitex
- Chemicals And Allied Products
- Kimia Farma
- Sentap
- South-Eastern Asia
- exclusive
- Indonesia
- Hensi
- Sweden
- Northern Europe
- Scania
- Europe
- Transportation
- Media
- Tbn Israel
- Education
- Weizmann Institute Of Science
- Resistancetrench
- Israeli Air Force
- Israel Antiquities Authority
- Dienet
- Wazuh
- North America
- United States
- Mirai
- Cve-2025-24016
- CVE-2025-24016
- Clayoxtymus1337
- Technology
- Epsilor Electric Fuel
- Southern Asia
- Advanced Weapons And Equipment India
- India
- Fin6
- More_Eggs
- Cryptocurrency
- Alex Lab
- Zoldyck
- Edf Energy
- Critical Infrastructures
- United Kingdom
- Spectrum
- Sudo And Sudo Caching
- Telecommunications
- Match Legitimate Name Or Location
- Unix Shell
- Spearphishing Link
- Credentials In Files
- Ingress Tool Transfer
- Amos
- Disable Or Modify Tools
- Israel Defense Forces
- Ghna
- Coca-Cola Europacific Partners
- Food And Kindred Products
- Automotive
- Southern Europe
- Locauto
- Italy
- Whitecoat
- Spain
- Mercadona
- Ups
- Wow Health Solutions
- Healthcare
- Rip_Real_World
- Cyprus Airways
- Netsupport Rat
- Tel Aviv University
- Illeak
- Desec0X
- Lucky_Gh0$T
- Yashma
- Cyberlock
- Numero
- Unc6032
- Chaos
- Deloitte
- 303
- Gucci
- Drive-By Compromise
- System Information Discovery
- Obfuscated Files Or Information
- Phishing
- Virtualization/Sandbox Evasion
- Command And Scripting Interpreter
- Eddiestealer
- Password Managers
- Credentials From Web Browsers
- Screen Capture
- Data From Local System
- Input Capture
- Windows Credential Manager
- Exfiltration Over C2 Channel
- User Execution
- Credentials From Password Stores
- File And Directory Discovery
- Australia And New Zealand
- W_Tchdogs
- Superloop
- Australia
- Resource Hijacking
- Exploitation For Client Execution
- Escape To Host
- Docker
- Web Protocols
- Exploit Public-Facing Application
- Smb/Windows Admin Shares
- External Remote Services
- Network Service Discovery
- Deploy Container
- Lateral Tool Transfer
- Change Default File Association
- Remote System Discovery
- Financial Theft
- Romania
- Cameleon
- Bitdefender
- Eastern Europe
- Venom Rat
- Eastern Asia
- Cisco
- CVE-2023-20118
- Macao Special Administrative Region
- Vicioustrap
- Cve-2023-20118
- Uat-6382
- Trimble
- Tetraloader
- CVE-2025-0944
- Cve-2025-0944
- Obfuscated Files Or Information: Encrypted Or Encoded Data
- Masquerade Task Or Service
- Dynamic-Link Library Injection
- Powershell
- Valleyrat
- China
- Rundll32
- Regsvr32
- Scheduled Task
- Process Discovery
- File Deletion
- Reflective Code Loading
- Malicious File
- Silver Fox
- Trickbot
- Bumblebee
- Qakbot
- Danabot
- Warmcookie
- Cetus
- Purehvnc
- Bytebreaker
- Mexico
- Viralgod
- Telcel
- Latin America And The Caribbean
- Peter Green Chilled
- Cellcom
-
May 22, 2025
Malware Campaign Exploiting Kling AI to Target Users
A new malware campaign has been identified that uses counterfeit Facebook pages and sponsored ads to lure users to fake websites impersonating Kling AI, an AI-powered platform. The campaign, first detected in early 2025, tricks victims into downloading a malicious file that installs a remote access trojan (RAT) on their systems, allowing attackers to steal sensitive data. The operation is linked to Vietnamese threat actors, who have been increasingly using social engineering tactics to exploit the popularity of generative AI tools. The campaign highlights the growing trend of sophisticated social media-based attacks targeting unsuspecting users.
-
May 21, 2025
Threat Actor Claims to Have Scraped Hundreds of Millions of Facebook Records
In May 2025, a threat actor named ByteBreaker claimed to have scraped accounts from Facebook. According to the threat actor, hundreds of millions of records belonging to Facebook's users were taken, including various types of data scraped by abusing one of their APIs.