carders.biz

Over 130 Companies Have Fallen Victim to Social Engineering The GuidePoint Research and Intelligence Team (GRIT) has documented the activities of a highly sophisticated hacker group with significant skills in social engineering and network infiltration, including the ability to communicate in...

Changing your phone number could cost you personal data. Specialists from Positive Technologies have found that nearly every second phone number has already been used to register for various online services. Moreover, one-third of these numbers are still linked to active accounts, which poses...

Inexperienced users of the messaging app are being intimidated with account block threats. The user receives a message supposedly from a support representative. The message states that a request to delete their account has been submitted in their name - to cancel it, they need to provide a...

Hacker KryptonZambie launches Black Friday on Cybercriminal Forum. Over 183 million records containing contact information and employment details have been stolen from a data broker and are being sold on the dark web. The seller, using the nickname KryptonZambie, has listed the data for $6,000...

A financially motivated Chinese threat actor dubbed "SilkSpecter" is using thousands of fake online stores to steal the payment card details of online shoppers in the U.S. and Europe. The fraud campaign started in October 2024, offering steep discounts for the upcoming Black Friday shopping...

Hackers are targeting Windows machines using the ZIP file concatenation technique to deliver malicious payloads in compressed archives without security solutions detecting them. The technique exploits the different methods ZIP parsers and archive managers handle concatenated ZIP files. This new...

Hacker forums Cracked, Nulled, MySellIX and StarkRDP are seized by the FBI, Europol and international law enforcement as part of ‘Operation Talent’. A large ‘‘Operation Talent’ seizure poster was splashed across most of the shady websites by Wednesday afternoon. “This website, as well...

Hackers gained access to the secure control panel of the autonomous system AIXBT, resulting in the theft of 55 ETH (approximately $107,000) from the Simulacrum wallet - a tool for building model portfolios. The bot's developer, Rxbt, confirmed the incident, stating that the attacker inserted two...

A hacking group dubbed 'Elusive Comet' targets cryptocurrency users in social engineering attacks that exploit Zoom's remote control feature to trick users into granting them access to their machines. Zoom's remote control feature allows meeting participants to take control of another...

The UK National Cyber Security Centre (NCSC) has published a joint technical summary with the Five Eyes alliance, detailing a new active espionage campaign. The attack is attributed to the Chinese APT group GREF, and its tools target users on both Android and iOS platforms. The primary targets...

Law enforcement authorities in the United States and the Netherlands have seized 39 domains and associated servers used by the HeartSender phishing gang operating out of Pakistan. Also known as Saim Raza and Manipulators Team, the group has operated online cybercrime marketplaces for over a...

Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login servers. This statement comes after a threat actor eleased multiple text files yesterday containing a sample database, LDAP...

The dark web leak site of the Everest ransomware gang has apparently been hacked over the weekend by an unknown attacker and is now offline. The unknown attacker replaced the website's contents with the following sarcastic message: "Don't do crime CRIME IS BAD xoxo from Prague." The Everest...

A new malware-as-a-service (MaaS) platform named 'SuperCard X' has emerged, targeting Android devices via NFC relay attacks that enable point-of-sale and ATM transactions using compromised payment card data. SuperCard X is linked to Chinese-speaking threat actors and shows code similarities with...

$10 Million Bounty for Criminal Head who earned up to 1 Billion from Stolen Cards The U.S. Department of Justice has charged Timur Shahmamatov in connection with the now-defunct carder forum Joker's Stash. The accused (who used the nicknames "JokerStash" and "Vega") launched the forum in October...

A proof-of-concept attack called "Cookie-Bite" uses a browser extension to steal browser session cookies from Azure Entra ID to bypass multi-factor authentication (MFA) protections and maintain access to cloud services like Microsoft 365, Outlook, and Teams. The attack was devised by Varonis...

A threat actor exploited a zero-day vulnerability in Samsung’s Android image processing library to deploy a previously unknown spyware called 'LandFall' using malicious images sent over WhatsApp. The security issue was patched this year in April, but researchers found evidence that the LandFall...

Hackers exploited a critical vulnerability and the built-in antivirus feature in Gladinet's Triofox file-sharing and remote-access platform to achieve remote code execution with SYSTEM privileges. The security issue leveraged in the attack is CVE-2025-12480 and can be used to bypass...

Google is suing more than two dozen unnamed individuals allegedly involved in peddling a popular China-based mobile phishing service that helps scammers impersonate hundreds of trusted brands, blast out text message lures, and convert phished payment card data into mobile wallets from Apple and...

Uhale Android-based digital picture frames come with multiple critical security vulnerabilities and some of them download and execute malware at boot time. Mobile security company Quokka conducted an in-depth security assessment on the Uhale app and found behavior suggesting a connection with...