A newly analyzed DarkCrystal RAT (DCRat) campaign shows how threat actors are turning an apparently harmless SVG attachment into a full malware-delivery mechanism. The operation, investigated by the Trellix Advanced Research Center (ARC) following a customer escalation, uses a Colombian judicial-themed lure and reconstructs a password-protected archive directly inside the victim’s browser before progressing through […]

The post Malicious SVG Reconstructs DCRat Archive Entirely Inside Victim’s Browser appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researcher Christopher Domas has released a proof-of-concept project called “skitter-creek-bath-salts,” which demonstrates a vulnerability in AMD’s DRAM-controller configuration that could compromise hardware-enforced memory isolation. This technique, tested on AMD Family 16h processors, manipulates address-translation behavior in the memory-controller layer, allowing access to data typically protected from the operating system, the kernel, and even ring-0 […]

The post New DRAM Scrambling Attack Unlocks AMD CPU PSP, SMM and Microcode appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly uncovered espionage operation targeting Afghan telecom providers and South Asian critical infrastructure has exposed a layered attacker ecosystem built around custom implants, spoofed delivery portals, cloud-backed command-and-control channels. The campaign began with sector-specific social-engineering lures, including a malicious Inno Setup package named TMS_AfghanTelecom.exe, distributed within a ZIP archive masquerading as Afghan Telecom’s telecom-management […]

The post PATCHCORD Infrastructure Hosts SuperShell C2 for Remote Commands and Webshell Management appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.