New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations

THN Daily Updates
Newsletter
cover

⚡ LIVE WEBINAR ➟ Building Resilient Identity: Reducing Security Debt in 2025

Attacks Evolve, So Can Your Defenses--Learn How to Mitigate Risk and Optimize Identity Security with Okta

Download Now Sponsored
LATEST NEWS Feb 17, 2025

CISO's Expert Guide To CTEM And Why It Matters

Cyber threats evolve—has your defense strategy kept up? A new free guide available here explains why Continuous Threat Exposure Management (CTEM) is the smart approach for proactive cybersecurity. This concise report ma...

Read More
Twitter Facebook LinkedIn

⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More

Welcome to this week's Cybersecurity News Recap. Discover how cyber attackers are using clever tricks like fake codes and sneaky emails to gain access to sensitive data. We cover everything from device code phishing to ...

Read More
Twitter Facebook LinkedIn

Snyk's annual Capture the Flag event, Fetch the Flag 2025, is back!

Hosted by Snyk and John Hammond, this year's event will take place on February 27, 2025 from 9am ET to 9pm ET. Engage in 20+ real-world security challenges, enhance your professional development and earn CPE credits. Register for free

Read More
Twitter Facebook LinkedIn

New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations

Cybersecurity researchers have shed light on a new Golang-based backdoor that uses Telegram as a mechanism for command-and-control (C2) communications. Netskope Threat Labs, which detailed the functions of the malware,...

Read More
Twitter Facebook LinkedIn

Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls

Google is working on a new security feature for Android that blocks device owners from changing sensitive settings when a phone call is in progress. Specifically, the in-call anti-scammer protections include preventing ...

Read More
Twitter Facebook LinkedIn

New "whoAMI" Attack Exploits AWS AMI Name Confusion for Remote Code Execution

Cybersecurity researchers have disclosed a new type of name confusion attack called whoAMI that allows anyone who publishes an Amazon Machine Image (AMI) with a specific name to gain code execution within the Amazon Web...

Read More
Twitter Facebook LinkedIn

Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks

The North Korean threat actor known as the Lazarus Group has been linked to a previously undocumented JavaScript implant named Marstech1 as part of limited targeted attacks against developers. The active operation has b...

Read More
Twitter Facebook LinkedIn

AI-Powered Social Engineering: Ancillary Tools and Techniques

Social engineering is advancing fast, at the speed of generative AI. This is offering bad actors multiple new tools and techniques for researching, scoping, and exploiting organizations. In a recent communication, the F...

Read More
Twitter Facebook LinkedIn
cover

⚡ LIVE WEBINAR ➟ Building Resilient Identity: Reducing Security Debt in 2025

Attacks Evolve, So Can Your Defenses--Learn How to Mitigate Risk and Optimize Identity Security with Okta

Download Now Sponsored

This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here.

Contact THN: info@thehackernews.com
Unsubscribe

THN | 2nd Floor, 219, K.P BLock, Pitampura, Delhi