Security
Android banking trojan stealing money: no antivirus software can detect it
Threat actors are actively targeting Android users with a new variant of the Cerberus Android banking trojan. The malware, in development since 2019, has evolved to dynamically switch command and control servers and its sophisticated infection chain complicates detection and removal, the Cyble Research and Intelligence Labs (CRIL) reports.
Read more about Android banking trojan stealing money: no antivirus software can detect it
Can you trust open-source? Repositories increasingly contain malware, analysts warn
Dependence on open-source repositories has sparked a surge in malicious packages infiltrating software products, software supply chain security company Sonatype has warned.
Read more about Can you trust open-source? Repositories increasingly contain malware, analysts warn
Quantum computer cracks ‘military-grade’ encryption
A team of scientists in China has reportedly launched the world’s first “effective” quantum attack on a classical encryption method.
Read more about Quantum computer cracks ‘military-grade’ encryption
Ransomware attack costs rising sharply in 2024, cyber insurer warns
The average ransom demand has now reached $1.3 million, with some variants asking for up to $4.3 million for a decryptor.
Read more about Ransomware attack costs rising sharply in 2024, cyber insurer warns
New EU law touts strict cybersecurity requirements for all connected and IoT devices
The EU Council's new Cyber Resilience Act passed on Wednesday requires all connected devices to be manufactured with robust security measure, before getting into the hands of consumers.
Read more about New EU law touts strict cybersecurity requirements for all connected and IoT devices
Danish sports simulator exposes 110TB of user data
New research points to a data leak affecting golf and baseball enthusiasts using TrackMan devices.
Read more about Danish sports simulator exposes 110TB of user data
Find a job, lose your data: hundreds of thousands of CVs leaked
Snaphunt, a remote hiring platform, has leaked over two hundred thousand CVs. The leak exposes job seekers' personal data and puts them at high risk of identity theft.
Read more about Find a job, lose your data: hundreds of thousands of CVs leaked
Google leads global anti-scam initiative, establishes fraud-fighting platform
A new ‘internet-scale’ exchange will collect and exchange signals of fraudulent activities. The hope is that the centralized platform will enable faster identification and disruption of cybercrime.
Read more about Google leads global anti-scam initiative, establishes fraud-fighting platform
Hackers weaponizing VSCode for remote access
Attackers are tricking developers into launching malicious LNK files, which turn Visual Studio Code, a popular code editor, into a remote access tool.
Read more about Hackers weaponizing VSCode for remote access
Cybercrooks abuse stolen SharePoint, OneDrive, and Dropbox accounts for phishing
If someone shares a file on SharePoint, OneDrive, Dropbox, or any other legitimate file hosting service, beware – it may be a phishing attack designed to bypass defenses.
Read more about Cybercrooks abuse stolen SharePoint, OneDrive, and Dropbox accounts for phishing
Massive data spill reveals loan shop collects and exposes private messages. What data was leaked?
A data leak at Nigerian FinTech company BestFin Nigeria has exposed 846,000 customers and their emergency contacts. The leak also revealed that money lenders try to squeeze every drop of data from their clients, including private communications.
Read more about Massive data spill reveals loan shop collects and exposes private messages. What data was leaked?
Late shipment? Retailers’ data leak may have allowed attackers to redirect it
US outdoor sports retailer Peter Glenn has left numerous credentials exposed. The oversight leaves the business vulnerable to severe cyberattacks, including customer data and parcel theft.
Read more about Late shipment? Retailers’ data leak may have allowed attackers to redirect it
How I hack with an Apple Mac: a guide to empowering every byte
I used to turn my nose up at even the idea of hacking from a Mac because it didn’t make sense. Nowadays, it’s all I’ve been using for my OSINT investigations and penetration testing.
Read more about How I hack with an Apple Mac: a guide to empowering every byte
Major breach exposes every Dutch police officer: state-sponsored actor suspected
The Dutch National Police suspect that a state-sponsored actor was behind a cyber attack that exposed nearly 63,000 officers’ names, email addresses, phone numbers, and, in some cases, other private information.
Read more about Major breach exposes every Dutch police officer: state-sponsored actor suspected
To catch a predator admin: the power of OSINT
This #OpChildSafety investigation began on March 12th, 2024, when one of my threat researchers from W1nterStorm, whom I shall refer to by the alias CR-2 (Confidential Researcher), discovered a Facebook group called 'Modeling 4 Kidz' that was not what it appeared to be.
Read more about To catch a predator admin: the power of OSINT
Five percent of all Adobe Commerce and Magento stores hacked, researchers say
Ray-Ban, National Geographic, Cisco, Whirlpool, and Segway are among the victims of a hacking campaign targeting merchants. The Sansec Forensics Team reported that attackers have already breached 4,275 online stores by exploiting a critical vulnerability affecting Adobe Commerce and Magento software.
Read more about Five percent of all Adobe Commerce and Magento stores hacked, researchers say
Fake trading apps infiltrate major app stores with a pig-butchering scheme
Cybercriminals are targeting Apple iOS and Android users in a large-scale fraud campaign involving fake trading apps, Group-IB’s threat intelligence analysts warn. Fake trading platforms pop up on app stores containing no malware to bypass defenses, yet allow attackers to extract significant funds.
Read more about Fake trading apps infiltrate major app stores with a pig-butchering scheme
True horror story for Outlast devs: major data breach will result in delays
Red Barrels, the creator of the psychological horror game Outlast franchise, has suffered a data breach.
Read more about True horror story for Outlast devs: major data breach will result in delays
Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
Google's latest flagship smartphone raises concerns about user privacy and security. It frequently transmits private user data to the tech giant before any app is installed. Moreover, the Cybernews research team has discovered that it potentially has remote management capabilities without user awareness or approval.
Read more about Who owns your shiny new Pixel 9 phone? You can’t say no to Google’s surveillance
Wave of record-breaking DDoS attacks originating from compromised WiFi routers
Cloudflare has disclosed a new largest-ever DDoS (distributed denial of service) attack, which peaked at 3.8 Tbps. This is equivalent to filling a 1 terabyte hard drive in less than three seconds. An unprecedented campaign of hyper-volumetric DDoS attacks tested defenses during September.
Read more about Wave of record-breaking DDoS attacks originating from compromised WiFi routers
