InfoSecBulletin Cybersecurity for mankind
IBM Security Trusteer researchers found a new malware campaign using JavaScript web injections in March 2023. It’s widespread and evasive, with historical Indicators of Compromise (IOCs) suggesting a possible link to DanaBot.
ALSO READ:
Chameleon SEO Poisoning
Hackers poison Bing and Google search results to deliver phishing banking pages
By infosecbulletin
/ Tuesday , August 25 2026
Bank customers looking for a login page can now fall into a trap before getting a strange email or text....
Read More
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
By infosecbulletin
/ Monday , August 24 2026
A mysterious AI model dubbed "Ox Alpha" has surfaced online and created noise within the developer community after releasing on...
Read More
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
By infosecbulletin
/ Monday , August 24 2026
A group of hackers named “Madarax” claims they have stolen and are offering to sell the personal information of about...
Read More
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
By infosecbulletin
/ Monday , August 24 2026
A new hacking technique has been demonstrated to steal data from Elon Musk's Grok AI. It uses a simple trick...
Read More
About thousands of leaked AWS keys Held Full Admin Rights
By infosecbulletin
/ Sunday , August 23 2026
More than 9,300 AWS access keys that were made public from August 2022 to August 2026 are still active, says...
Read More
US Bank investigates LockBit’s Data Breach Claims
By infosecbulletin
/ Sunday , August 23 2026
US Bank is looking into LockBit's claims about a breach and stolen data. The ransomware group says they will share...
Read More
Five new malware families actively targeting Asian Gov.t infra
By infosecbulletin
/ Friday , August 21 2026
Central Asian government agencies have been attacked in a cyber spy operation that used a small but different range of...
Read More
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
By infosecbulletin
/ Friday , August 21 2026
T-Mobile’s cybersecurity team reportedly physically cut a network cable connecting compromised infrastructure to the outside world. According to Bloomberg, the move...
Read More
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
By infosecbulletin
/ Friday , August 21 2026
Splunk has issued security fixes for 17 weaknesses in different apps and add-ons, such as Splunk MCP Server, Splunk AI...
Read More
“Zombie Card” attack revels expired Visa card may be used for contactless payments
By infosecbulletin
/ Friday , August 21 2026
Security experts have shown that expired credit cards can still be used. A study from the University of Massachusetts Amherst,...
Read More
Web injections, a technique used by banking trojans, are still a threat. Cybercriminals use these injections to manipulate data exchanges between users and web browsers, potentially accessing sensitive data.
Since the start of 2023, researchers have identified over 50,000 infected user sessions where these injections were used by attackers. More than 40 banks in North America, South America, Europe, and Japan were affected by this malware campaign.
Click here to read the full article.
