Recent Security News

  • Fake VPN Chrome extensions force-installed 1.5 million times

    December 22, 2023 at 09:55AM Three Chrome extensions masquerading as VPNs were found to be malware, infecting users’ machines through pirated video game installers. ReasonLabs discovered the malicious extensions and reported their findings to Google, resulting in their removal from the Chrome Web Store. The extensions targeted Russian-speaking users, stealing data, manipulating web requests, and…

    Read More

  • UK Teen Gets Indefinite Hospital Order For ‘Grand Theft Auto’ Hack

    December 22, 2023 at 09:12AM British teenager Arion Kurtaj has been indefinitely hospitalized due to his inability to control his actions online. He was found responsible for a major hacking spree targeting the video game industry and membership in the Lapsus$ group. Kurtaj, diagnosed with autism, will remain at a secure hospital for life unless…

    Read More

  • In Other News: Crypto Exchange Hack Guilty Plea, Rating AI Vulnerabilities, Intellexa Spyware 

    December 22, 2023 at 09:12AM SecurityWeek releases a weekly cybersecurity roundup with notable stories. This week includes Ukrainian hackers targeting a Russian water utility, a former security engineer admitting to cryptocurrency exchange hacks, patches from Apple and Adobe, and various vulnerability and fraud reports. Additionally, Google shut down thousands of YouTube channels linked to influence…

    Read More

  • Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities

    December 22, 2023 at 08:48AM Indian government entities and the defense sector are targeted by a phishing campaign dubbed Operation RusticWeb, dropping Rust-based malware for intelligence gathering. The attack involves Rust-based payloads, PowerShell commands, and trojans like AllaKore RAT, Ares RAT, and DRat. The group behind the campaign is linked to Pakistan and uses advanced…

    Read More

  • Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware

    December 22, 2023 at 08:00AM A recent phishing campaign employs decoy Microsoft Word documents to distribute Nim-based malware. The backdoor lures victims to enable macros, then establishes a connection with a remote server disguised as a Nepali government entity. This comes amidst increased distribution of various malware strains and social engineering campaigns leveraging new tactics.…

    Read More