GBHackers On Security

Publication

0 followers

Security news site covering daily hacking news and cyberattack updates.

ClickFix Exploits Homebrew Workflow to Deploy Cuckoo Stealer for macOS Credential Theft

ClickFix is weaponizing a fake Homebrew installation workflow to deliver Cuckoo Stealer, a macOS credential‑stealing RAT. The campaign uses typosquatted domains such as homabrews.org that mimic brew.sh and inject a malicious curl | bash command into the clipboard, prompting developers to run it. Once executed, the loader captures the user’s password, installs a LaunchAgent for persistence, and downloads the Cuckoo Stealer which exfiltrates passwords, Keychain items, wallets, and messaging session data. Researchers observed multiple related typosquat sites sharing the same IP infrastructure, highlighting a broader ClickFix delivery pattern.

Technology Pulse

GBHackers On Security

Recent Posts

ClickFix Exploits Homebrew Workflow to Deploy Cuckoo Stealer for macOS Credential Theft

New SysUpdate Variant Malware Discovered, Decryption Tool for Linux C2 Traffic Released

New Phishing Campaign Exploits Booking.com Partners, Targets Customers in Multi-Stage Fraud Scheme

Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware Threat

LockBit 5.0 Emerges: Cross-Platform Ransomware Now Targeting Windows, Linux, and ESXi Systems

Lotus Blossom Hackers Breach Official Notepad++ Hosting Infrastructure

Hackers Abuse ClawHub Skills to Evade VirusTotal via Social Engineering

APT Hackers Abuse Trusted Edge Services to Stealthily Deploy Malware

Vortex Werewolf Targets Organizations With Tor-Enabled RDP, SMB, SFTP, and SSH Backdoors

Cybersquatting Attacks Exploit Trusted Brands to Steal Customer Data and Spread Malware

New Telegram Phishing Scam Hijacks Login Flow to Steal Fully Authorized User Sessions

FvncBot Targets Android Users, Exploiting Accessibility Services for Attacks

RenEngine Loader Deploys Stealthy Multi-Stage Execution to Bypass Security Measures

New Wave of Odyssey Stealer Targets macOS Users in Active Cyberattack Campaign

CentOS 9 Security Flaw Enables Privilege Escalation – PoC Released

Phishing and OAuth Token Vulnerabilities Lead to Full Microsoft 365 Breach

Spam Campaign Distributes Fake PDFs, Deploys Remote Monitoring Tools for Ongoing Access

TP-Link Vulnerabilities Let Hackers Take Full Control of Devices

Interlock Ransomware Exploits Zero-Day in Gaming Anti-Cheat Driver to Disable EDR, AV

Supply Chain Attack Exploits Notepad++ Update Mechanism to Push Targeted Malware

Hackers Exfiltrate NTDS.dit File, Gain Full Control of Active Directory Environments

Chollima APT Hackers Weaponize LNK Files to Deploy Sophisticated Malware

Malicious Google Play App With 50K+ Downloads Spreads Anatsa Banking Trojan

Notepad++ Attack Breakdown Reveals Sophisticated Malware and Actionable IoCs

TAMECAT PowerShell Backdoor Targets Edge and Chrome: Login Credentials At Risk

Threat Actors Hide Behind School-Themed Domains In Newly Uncovered Bulletproof Infrastructure

Sophisticated Malware Lurks In Open VSX Extension With 5,066 Downloads

Attackers Weaponize Microsoft 365 Outlook Add-Ins to Quietly Exfiltrate Email Data

Open Directory Exposure Leaks BYOB Framework Across Windows, Linux, and macOS

BlackIce Introduced as Container-Based Red Teaming Toolkit for AI Security Testing

Fake “Mac Cleaner” Campaign Uses Google Ads to Redirect Users to Malware

Python-Based PyRAT Emerges as Cross-Platform Threat With Advanced Remote Access Capabilities

Matanbuchus Malware Evolves to Bypass AV Defenses by Swapping Core Components

Cal.com Broken Access Controls Lead to Account Takeover and Data Exposure

ESkimming Attacks Surge with Evolving Tactics and Ongoing Recovery Challenges

Critical IDIS IP Camera Vulnerability Allows Full Computer Compromise with One-Click Exploit

Cybercriminals Exploit Canadians’ Dependence on Digital Services in Widespread Attacks

Chinese National Sentenced to 46 Months for Laundering Millions Stolen From U.S. Investors

Attackers Hijack GitHub Desktop Repo to Spread Malware via Official Installer

G_Wagon NPM Package Exploits Users to Steal Browser Credentials with Obfuscated Payload

ShinyHunters Group Targets Over 100 Enterprises, Including Canva, Atlassian, and Epic Games

Hackers Exploit SEO Poisoning to Target Users Seeking Legitimate Tools

Lazarus Hackers Target European Drone Manufacturers in Active Campaign

Technology Pulse

GBHackers On Security

Recent Posts

ClickFix Exploits Homebrew Workflow to Deploy Cuckoo Stealer for macOS Credential Theft

New SysUpdate Variant Malware Discovered, Decryption Tool for Linux C2 Traffic Released

New Phishing Campaign Exploits Booking.com Partners, Targets Customers in Multi-Stage Fraud Scheme

Malicious Fork of Legitimate Triton App Discovered on GitHub, Exposing New Malware Threat

LockBit 5.0 Emerges: Cross-Platform Ransomware Now Targeting Windows, Linux, and ESXi Systems

Lotus Blossom Hackers Breach Official Notepad++ Hosting Infrastructure

Hackers Abuse ClawHub Skills to Evade VirusTotal via Social Engineering

APT Hackers Abuse Trusted Edge Services to Stealthily Deploy Malware

Vortex Werewolf Targets Organizations With Tor-Enabled RDP, SMB, SFTP, and SSH Backdoors

Cybersquatting Attacks Exploit Trusted Brands to Steal Customer Data and Spread Malware

New Telegram Phishing Scam Hijacks Login Flow to Steal Fully Authorized User Sessions

FvncBot Targets Android Users, Exploiting Accessibility Services for Attacks

RenEngine Loader Deploys Stealthy Multi-Stage Execution to Bypass Security Measures

New Wave of Odyssey Stealer Targets macOS Users in Active Cyberattack Campaign

CentOS 9 Security Flaw Enables Privilege Escalation – PoC Released

Phishing and OAuth Token Vulnerabilities Lead to Full Microsoft 365 Breach

Spam Campaign Distributes Fake PDFs, Deploys Remote Monitoring Tools for Ongoing Access

TP-Link Vulnerabilities Let Hackers Take Full Control of Devices

Interlock Ransomware Exploits Zero-Day in Gaming Anti-Cheat Driver to Disable EDR, AV

Supply Chain Attack Exploits Notepad++ Update Mechanism to Push Targeted Malware

Hackers Exfiltrate NTDS.dit File, Gain Full Control of Active Directory Environments

Chollima APT Hackers Weaponize LNK Files to Deploy Sophisticated Malware

Malicious Google Play App With 50K+ Downloads Spreads Anatsa Banking Trojan

Notepad++ Attack Breakdown Reveals Sophisticated Malware and Actionable IoCs

TAMECAT PowerShell Backdoor Targets Edge and Chrome: Login Credentials At Risk

Threat Actors Hide Behind School-Themed Domains In Newly Uncovered Bulletproof Infrastructure

Sophisticated Malware Lurks In Open VSX Extension With 5,066 Downloads

Attackers Weaponize Microsoft 365 Outlook Add-Ins to Quietly Exfiltrate Email Data

Open Directory Exposure Leaks BYOB Framework Across Windows, Linux, and macOS

BlackIce Introduced as Container-Based Red Teaming Toolkit for AI Security Testing

Fake “Mac Cleaner” Campaign Uses Google Ads to Redirect Users to Malware