Active Directory serves as the central repository for an organization’s authentication infrastructure, making it a prime target for sophisticated threat actors. The NTDS.dit database, which stores encrypted password hashes and critical domain configuration data, is the crown jewel of enterprise security. Successful acquisition of this file can lead to complete organizational compromise, enabling attackers to […]

The post Hackers Exfiltrate NTDS.dit File, Gain Full Control of Active Directory Environments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A malware campaign where cybercriminals distribute a fake LINE messenger installer that secretly deploys the ValleyRAT malware to steal credentials and evade detection. Since early 2025, threat actors have increasingly used fraudulent software installers to deliver malware. This campaign shares techniques with previously discovered LetsVPN-themed attacks, including task-scheduler persistence, PowerShell-based evasion, and C2 communications via Hong Kong servers. Cybereason GSOC performed […]

The post ValleyRAT Masquerades as LINE Installer to Target Users and Harvest Login Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.