Mayura Kathir
Mayura Kathir is a cybersecurity reporter at GBHackers News, covering daily incidents including data breaches, malware attacks, cybercrime, vulnerabilities, zero-day exploits, and more.
cyber security
Hackers Manipulate NVIDIA GPU Monitoring to Conceal Cryptocurrency Mining on Compromised Linux Servers
A Linux cryptomining intrusion in which attackers falsified NVIDIA GPU telemetry, concealed mining processes with a kernel rootkit, and maintained separate command channels through...
ChatGPT
Hackers Exploit ChatGPT and Claude Website Typos to Deliver Malware and Hijack Browsers
Oleg Zaytsev traced 186 lookalike domains across 27 AI brands, including Claude, ChatGPT, DeepSeek, Perplexity, Midjourney, ElevenLabs and Cursor.
He named the delivery pattern...
cyber security
Hackers Hijack Microsoft SQL Servers Using T-SQL Commands to Install Gh0st RAT and Crypto Miners
An active campaign in early October 2026 that targets Internet-facing Microsoft SQL Server instances.
The entry point is dllhost.exe, a Go binary packed with...
cyber security
Hackers Disguise XLoader Malware as Purchase Order Confirmations to Infect Windows Computers
Hackers are distributing XLoader malware through phishing emails disguised as purchase order confirmation requests, using malicious Word attachments to compromise Windows computers.
The emails...
AI
Chinese-Speaking Hackers Weaponize Cairn AI Framework to Breach Semiconductor and Defense Organizations
Chinese-speaking attackers weaponized the open-source Cairn penetration-testing framework to conduct 25 autonomous operations against at least 19 organizations during August–September 2026.
Ten organizations experienced confirmed...
APT
StingyBasilisk APT Uses Windows Named Pipes to Control Malware and Evade Security Detection
A previously unknown espionage-focused group, tracked as StingyBasilisk, has run covert operations against a victim network since at least April 2022.
The initial infection...
cyber security
Hackers Deploy Beast Ransomware to Disable Backup Services, Delete Shadow Copies, and Encrypt Network Drives
A Beast ransomware payload gives affiliates an interactive graphical console and the ability to override its embedded settings.
It also wipes recovery options before...
cyber security
New ArcticRAT Malware Uses Fake VPN Connections to Evade Google Play Protect During Installation
ArcticRAT, an Android remote access trojan (RAT). It started as spyware aimed at users of 11 cryptocurrency apps and has grown into a modular,...
Join our community of SUBSCRIBERS and be part of the conversation.
To subscribe, simply enter your email address on our website or click the subscribe button below. Don't worry, we respect your privacy and won't spam your inbox. Your information is safe with us.