Recent Security News
-
Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware
December 21, 2023 at 12:18PM Predator spyware, part of the Intellexa Alliance, offers persistent reboot capability as an add-on. It is integral to Alien, targeting Android and iOS, sold for millions and reliant on exploit chains. Intellexa offloads attack setup to customers, maintaining plausible deniability. Public attribution efforts have had limited impact on their ability…
-
Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication
December 21, 2023 at 12:18PM Cybersecurity researchers identified an updated version of Android banking malware “Chameleon,” which expanded its targeting to include users in the U.K. and Italy. The malware excels in executing Device Takeover using the accessibility service and is now being delivered via Zombinder. The latest findings also revealed its ability to disrupt…
-
OpenAI rolls out imperfect fix for ChatGPT data leak flaw
December 21, 2023 at 11:49AM OpenAI has addressed a data exfiltration bug in ChatGPT that could leak conversation details. The latest fix includes client-side checks, but it’s not perfect and attackers may still exploit it under certain conditions. Safety checks are not yet implemented in the iOS app, leaving the risk unaddressed. The issue was…
-
Chameleon Android Trojan Offers Biometric Bypass
December 21, 2023 at 11:28AM A new variant of the Android banking Trojan, Chameleon, has evolved to target users in Australia, Poland, UK, and Italy by bypassing biometric security and utilizing new commands. This includes the ability to interrupt biometric operations, employ Android’s Accessibility service for device takeover attacks, and task scheduling through the AlarmManager…
-
BidenCash darkweb market gives 1.9 million credit cards for free
December 21, 2023 at 10:44AM BidenCash, a stolen credit card marketplace, is offering 1.9 million credit cards for free to gain popularity among cybercriminals. The platform has gained notoriety by occasionally releasing free dumps, but previous data has been found to contain duplicates and expired cards. Users of leaked valid cards are at risk of…