Collaborate Disseminate
An e-commerce credit-card skimmer is being used by a second skimmer to steal payment data – and both are on Costway’s website. Continue reading Magento Web Skimmers Piggyback in Ongoing Costway Website Compromise
A new version of the Agent Tesla RAT can ‘kneecap’ endpoint protection software supported by Microsoft ASMI. Continue reading Agent Tesla Trojan ‘Kneecaps’ Microsoft’s Anti-Malware Interface
Wind River Systems is warning of a ‘security incident’ after one or more files was downloaded from its network. Continue reading Wind River Security Incident Affects SSNs, Passport Numbers
Researchers allege that software used for downloading Android apps onto PCs and Macs has been compromised to install malware onto victim devices. Continue reading Alleged Gaming Software Supply-Chain Attack Installs Spyware
The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites. Continue reading WordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites
Apple has made structural improvements in iOS 14 to block message-based, zero-click exploits. Continue reading Apple iOS 14 Thwarts iMessage Attacks With BlastDoor System
The Pro-Ocean cryptojacking malware now comes with the ability to spread like a worm, as well as harboring new detection-evasion tactics. Continue reading Rocke Group’s Malware Now Has Worm Capabilities
A phishing kit has been found running on at least 700 domains – and mimicking services via false SharePoint, OneDrive and Office 365 login portals. Continue reading LogoKit Simplifies Office 365, SharePoint ‘Login’ Phishing Pages
The detection-evasion tool, libprocesshider, hides TeamTNT’s malware from process-information programs. Continue reading TeamTNT Cloaks Malware With Open-Source Tool
Researchers publicly disclosed flaws in ADT’s LifeShield DIY HD Video Doorbell, which could have allowed local attackers to access credentials, video feeds and more. Continue reading ADT Security Camera Flaw Opened Homes, Stores to Eavesdropping