Recent Security News

  • Researchers link 3AM ransomware to Conti, Royal cybercrime gangs

    January 20, 2024 at 10:16AM The 3AM ransomware operation is found to have connections with infamous groups like the Conti syndicate and the Royal ransomware gang. They are using new tactics such as sharing data leaks with victims’ social media followers and using bots to reply to high-ranking accounts on X. 3AM also tested a…

    Read More

  • Meta won’t remove fake Instagram profiles that are clearly catfishing

    January 20, 2024 at 10:16AM Imposters and romance scammers on Instagram are becoming increasingly problematic. Cases of impersonation, like that of “Santiago Scott” using the photos of Thiago Qualhato, reveal a lack of effective action from Instagram despite user reports. The prevalence of such behavior raises concerns about account protection and the need for user…

    Read More

  • Meta won’t remove fake Instagram profiles used for obvious catfishing

    January 20, 2024 at 07:26AM Instagram has fallen short in addressing the rise of imposters and romance scammers misusing the platform. Instances of fake profiles impersonating real people are being dismissed, even after being reported and appealed, raising concerns about the effectiveness of Instagram’s content review process. Users are advised to take measures to safeguard…

    Read More

  • In Other News: WhatsApp Privacy Issue, Spying via Ambient Light Sensor, Bigpanzi Botnet

    January 20, 2024 at 06:54AM SecurityWeek’s weekly cybersecurity roundup provides a concise overview of significant stories. This week’s highlights include a multimillion-dollar crypto scam, DDoS attacks by a pro-Russian threat actor, new spyware detection methods, macOS infostealers, a malicious campaign targeting Docker hosts, a WhatsApp privacy issue, Drupal and libX11 patches, and reports on AI…

    Read More

  • Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

    January 20, 2024 at 06:45AM A China-linked cyber espionage group, UNC3886, exploited a zero-day vulnerability (CVE-2023-34048) in VMware vCenter Server, allowing privileged access and deployment of malware. These actions enable further exploitation of VMware flaws. VMware advises users to update to avoid potential threats. Additionally, UNC3886 utilized a Fortinet flaw (CVE-2022-41328) to implant malware, targeting…

    Read More