The Exploit Post

Sign in Subscribe

News

News

Google Sues Developers of Lighthouse Phishing Kit

Google Sues Developers of Lighthouse Phishing Kit

Google has filed a lawsuit against the operators of Lighthouse, a phishing-as-a-service (PhaaS) platform that cybercriminals worldwide use to steal bank card data. The attackers primarily operate through SMS messages, impersonating the United States Postal Service (USPS) and the E-ZPass toll payment system. Scale of the Operation According to Google&

Rhadamanthys Stealer Disrupted: Evidence Points to Law Enforcement Operation

Rhadamanthys Stealer Disrupted: Evidence Points to Law Enforcement Operation

Cybersecurity specialists report that dozens of customers using the Rhadamanthys info-stealer are complaining about sudden loss of access to their malware servers. The disruption appears consistent with a law enforcement takedown operation. What is Rhadamanthys? Rhadamanthys is a popular info-stealer among criminals, operating on a Malware-as-a-Service (MaaS) business model. The

Russian National Pleads Guilty to Selling Initial Access to Yanluowang Ransomware Operators

Russian national Alexey Olegovich Volkov has pleaded guilty to providing initial network access to target companies for operators of the Yanluowang ransomware. Between July 2021 and November 2022, Yanluowang operators compromised at least eight companies across the United States. The Access Broker Business Model According to the FBI, Volkov operated

Critical Triofox Vulnerability Exploited: Hackers Deploy Remote Access Tools via Antivirus Feature

Critical Triofox Vulnerability Exploited: Hackers Deploy Remote Access Tools via Antivirus Feature

Google researchers have issued a warning: attackers are actively exploiting a critical vulnerability in Gladinet Triofox to execute remote code with SYSTEM privileges, bypassing authentication and seizing full control of systems. The Vulnerability The flaw, designated CVE-2025-12480, carries a CVSS score of 9.1 and stems from flawed access control

"123456," "admin," and "password" Still Dominate Most Popular Passwords in 2025

"123456," "admin," and "password" Still Dominate Most Popular Passwords in 2025

Despite years of cybersecurity warnings, the passwords "123456," "admin," and "password" remain among the most commonly used combinations, according to new research from Comparitech analyzing over two billion passwords leaked in 2025. Same Bad Habits, Different Year Comparitech specialists examined passwords distributed on hacking

'Bitcoin Queen' Sentenced to 11 Years for Laundering $7.3 Billion Crypto Pyramid Scheme

'Bitcoin Queen' Sentenced to 11 Years for Laundering $7.3 Billion Crypto Pyramid Scheme

A London court sentenced 47-year-old Chinese national Zhimin Qian, also known as Yadi Zhang, to 11 years and 8 months in prison for laundering bitcoin from China's largest cryptocurrency investment pyramid scheme. The fraud affected over 128,000 victims between 2014 and 2017, causing losses exceeding $7.3

Konni Group Weaponizes Google Find Hub to Remotely Wipe Android Devices

Konni Group Weaponizes Google Find Hub to Remotely Wipe Android Devices

The North Korean hacking group Konni is exploiting Google Find Hub (formerly Find My Device) to track victims' GPS locations and remotely factory reset their Android devices—a destructive tactic marking a shift from the group's typical data theft operations. Attack Campaign Targets South Korean Users Cybersecurity