Search: “credential-stealing”

8 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 53 Ransomware 24 Threat actor 20 Exploit / PoC 20 Data breach 18 Vulnerability 12 Phishing & fraud 12 Policy & legal 3 Research 2 Industry 2

SeverityAll critical 56 high 58 medium 40 low 8 info 4

Hacking Public Wi-Fi DNS to Steal Credentials

Attackers can hijack public Wi-Fi DNS to redirect users to credential-stealing fake login pages; commenters debate HTTPS limits and mitigations like encrypted DNS.

The discussion examines how an attacker controlling DNS on shared or public Wi-Fi networks can redirect requests for legitimate services to attacker-controlled servers to steal credentials. Commenters analyze whether HTTPS and certificates mitigate the attack, noting attackers often rely on HTTP or browser trust quirks. Suggested defenses include encrypted DNS (DoH), DNSSEC, and travel routers running OpenWRT. No specific campaign, victims, or indicators are provided.

Schneier on SecurityAug 17, 11:18 UTC · 29d agoResearch

Search: “credential-stealing”

Hacking Public Wi-Fi DNS to Steal Credentials

ChainDrop Worm Hits 400 npm Packages with Two Billion Monthly Installs

Iranian Cyber Response to Death of IRGC Head Would Likely Use Reported TTPs and Previous Access

Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool

NPM flooded with malicious packages downloaded more than 86,000 times

Russian artists’ Spotify accounts defaced by pro

Android Apps uses a novel technique to by

Russian Hacking group Fxmsp claims hack of major AntiVirus Companies