Gootloader Cyberattackers Target Bengal-Cat Aficionados in Oz

November 8, 2024 at 12:05PM Recent research indicates that cybercriminals are targeting Australians interested in Bengal cats using Gootloader malware. By optimizing search results related to Bengal cat legality, they trick users into downloading malicious files. Sophos warns of rising attacks utilizing this method, urging users to be cautious of suspicious links and downloads. **Meeting … Read more

‘SteelFox’ Miner and Information Stealer Bundle Emerges

November 7, 2024 at 07:59AM The SteelFox crimeware bundle masquerades as legitimate software like Foxit PDF Editor and AutoCAD to steal user information. This emerging threat poses significant risks to users seeking these applications. The information was reported by SecurityWeek. **Meeting Takeaways:** 1. **Threat Overview**: The SteelFox crimeware bundle impersonates legitimate software, specifically Foxit PDF … Read more

Fake Copyright Infringement Emails Spread Rhadamanthys

November 6, 2024 at 05:56PM Check Point Research has tracked a spear-phishing campaign, “CopyR(ight)hadamantys,” targeting hundreds of companies globally with emails claiming copyright infringement. The emails deliver the sophisticated infostealer Rhadamanthys, capable of stealing sensitive data. Attackers use automation to send these messages, often impersonating known brands in technology and entertainment industries. ### Key Takeaways … Read more

CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure

October 31, 2024 at 06:14AM CyberPanel vulnerabilities have been exploited in ransomware attacks, impacting thousands of instances shortly after their disclosure. The article highlights the immediate ramifications of these security flaws. ### Meeting Takeaways: 1. **Vulnerability Overview**: CyberPanel vulnerabilities have been identified and exploited. 2. **Impact**: These vulnerabilities have led to the compromise of thousands … Read more

Android malware “FakeCall” now reroutes bank calls to attackers

October 30, 2024 at 10:58AM The new FakeCall malware for Android hijacks users’ outgoing calls to banks, redirecting them to attackers. It features advanced voice phishing tactics, realistic interfaces, and can capture audio/video. Recent improvements include additional control functionalities and commands, making it a more dangerous banking trojan. Users are cautioned against installing APKs directly. … Read more

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

October 23, 2024 at 02:00PM New variants of Grandoreiro banking malware are evolving to evade anti-fraud measures, employing tactics like domain generation algorithms and mouse tracking. Despite some arrests, operators continue to develop new features and target users across 45 countries, primarily through phishing. The malware adapts continuously, posing a significant threat to banking security. … Read more

Tricky CAPTCHA Caught Dropping Lumma Stealer Malware

October 22, 2024 at 12:31PM Lumma Stealer has launched a campaign using malicious CAPTCHA pages to prompt malware downloads. This malware aims to steal sensitive data. Researchers emphasize the need for security teams to adopt continuous monitoring and adapt defenses against evolving threats like Lumma Stealer, using a multilayered approach for effective protection. ### Meeting … Read more

Over 200 malicious apps on Google Play downloaded millions of times

October 15, 2024 at 10:32AM In one year, over 200 malicious apps on Google Play were identified, amassing nearly eight million downloads. Key threats included Joker, Adware, and Facestealer. Despite Google’s security measures, malware continues to bypass detection. Users are advised to read reviews and verify app permissions to avoid infection. ### Meeting Takeaways on … Read more