Collaborate Disseminate
Vulnerability—for which a proof-of-concept is forthcoming—is one of a string of flaws the company fixed that could lead to an attack chain. Continue reading VMWare Urges Users to Patch Critical Authentication Bypass Bug
DMARC analysis by Proofpoint shows that institutions in the U.S. have among some of the poorest protections to prevent domain spoofing and lack protections to block fraudulent emails. Continue reading Universities Put Email Users at Cyber Risk
Recent LofyLife campaign steals tokens and infects client files to monitor various user actions, such as log-ins, password changes and payment methods. Continue reading Malicious Npm Packages Tapped Again to Target Discord Users
Cybercriminals turn to container files and other tactics to get around the company’s attempt to thwart a popular way to deliver malicious phishing payloads. Continue reading Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office
Built-in Telegram and Discord services are fertile ground for storing stolen data, hosting malware and using bots for nefarious purposes. Continue reading Messaging Apps Tapped as Platform for Cybercriminal Activity
Newly discovered malware linked to Vietnamese threat actors targets users through a LinkedIn phishing campaign to steal data and admin privileges for financial gain. Continue reading Novel Malware Hijacks Facebook Business Accounts
Also known as the Atlantis Cyber-Army, the emerging organization has an enigmatic leader and a core set of admins that offer a range of services, including exclusive data leaks, DDoS and RDP. Continue reading Hackers for Hire: Adversaries Employ ‘Cyber Mercenaries’
300 restaurants and at least 50,000 payment cards compromised by two separate campaigns against MenuDrive, Harbortouch and InTouchPOS services. Continue reading Magecart Serves Up Card Skimmers on Restaurant-Ordering Systems
Threat actors offer victims what appear to be investment services from legitimate companies to lure them into downloading malicious apps aimed at defrauding them. Continue reading FBI Warns Fake Crypto Apps are Bilking Investors of Millions
Google removed eight Android apps, with 3M cumulative downloads, from its marketplace for being infected with a Joker spyware variant. Continue reading Google Boots Multiple Malware-laced Android Apps from Marketplace