GBHackers on Security

GBHackers on Security is a platform dedicated to Cyber Security that provides daily updates on Cyber Security news, hacking developments, technology trends, and tutorials for Kali Linux. Our goal is to keep the community informed about the latest events and advancements in the Cyber World.

International

English, Indonesian

Online/Digital

Outlet metrics

Domain Authority

Ranking

Global

#252692

Switzerland

#13055

Computers Electronics and Technology/Computer Security

#48

Traffic sources

Monthly visitors

Articles

Oracle Reports Data Breach, Initiates Client Notifications

2 weeks ago | gbhackers.com

Oracle Corporation has confirmed a data breach involving its older Gen 1 servers, marking its second cybersecurity incident disclosed in recent weeks.
Hackers Exploit Advanced MFA Bypass Techniques to Compromise User Accounts

1 month ago | gbhackers.com | Aman Mishra

In recent years, phishing has remained the most prevalent form of cyberattack, with approximately 1.2% of global email traffic.
New Pass-the-Cookie Attacks Bypass MFA, Giving Hackers Full Account Access

1 month ago | gbhackers.com

Multi-factor authentication (MFA), long considered a cornerstone of cybersecurity defense, is facing a formidable new threat: "Pass-the-Cookie" attacks.
Threat Actors Evade Security Measures to Launch SIM Swap Attacks

1 month ago | gbhackers.com | Aman Mishra

SIM swapping fraud continues to pose a significant threat to individuals and financial institutions, despite ongoing efforts.
Hackers Can Exploit "Wormable" Windows LDAP RCE Vulnerability for Remote Attacks

1 month ago | gbhackers.com

A critical new vulnerability in Microsoft’s Windows Lightweight Directory Access Protocol (LDAP), tagged as CVE-2025-21376.
Bybit Hacked - Hackers Stole $1.46 Billion Worth Crypto From Wallet

1 month ago | gbhackers.com

hackers infiltrated Bybit’s Ethereum cold wallet on February 21, 2025, siphoning approximately 401,346 ETH valued at $1.46 billion.
Hackers Exploit ADFS to Bypass MFA and Access Critical Systems

2 months ago | gbhackers.com

Hackers are targeting organizations using Microsoft’s Active Directory Federation Services (ADFS) to bypass multi-factor authentication (MFA) and infiltrate critical systems.
FlowerStorm PaaS Platform Attacking Microsoft Users With Fake Login Pages

Jan 17, 2025 | gbhackers.com | Aman Mishra

Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms. Phishing campaigns are delivered via Telegram and use unique URLs to route users to credential-capturing counterfeit login pages. These pages masquerade as popular services and steal login credentials along with multifactor authentication tokens via HTTP POST requests to adversary-controlled backend servers.
Hackers Deploy Web Shell To Abuse IIS Worker And Exfiltrate Data

Jan 16, 2025 | gbhackers.com | Aman Mishra

An attacker exploited a vulnerability in the batchupload.aspx and email_settings.aspx pages on the target server that allowed them to upload a malicious web shell to the IIS worker process (w3wp.exe). They initially attempted to upload a web shell to another location but failed to interact with it. Network traffic analysis revealed the source of the attack originated from IP address 86.48.10[.]109 using a forged user-agent string to mimic a legitimate Chrome browser.
AIRASHI Botnet Exploiting 0DAY Vulnerabilities In Large Scale DDoS Attacks

Jan 16, 2025 | gbhackers.com | Aman Mishra

AISURU botnet launched a DDoS attack targeting Black Myth: Wukong distribution platforms in August 2024 that leveraged a 0DAY vulnerability on cnPilot routers and used RC4 encryption for sample strings. After a brief pause in September, the botnet reappeared in October with the name kitty and was updated again in November as AIRASHI.