Collaborate Disseminate
As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot.
“SharkBot steals credentials and banking information,” Check Point researchers Alex Shamshur and… Continue reading SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps
Cybersecurity researchers have detailed a “simple but efficient” persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campa… Continue reading Researchers Uncover How Colibri Malware Stays Persistent on Hacked Systems
The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces … Continue reading FBI Shut Down Russia-linked “Cyclops Blink” Botnet That Infected Thousands of Devices
VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks.
Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 – 9.8), the issues imp… Continue reading VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products
Threat actors have been distributing malicious applications under the guise of seemingly harmless shopping apps to target customers of eight Malaysian banks since at least November 2021.
The attacks involved setting up fraudulent but legitimate-lookin… Continue reading Hackers Distributing Fake Shopping Apps to Steal Banking Data of Malaysian Users
Ukraine’s technical security and intelligence service is warning of a new wave of cyber attacks that are aimed at gaining access to users’ Telegram accounts.
“The criminals sent messages with malicious links to the Telegram website in order to gain un… Continue reading Ukraine Warns of Cyber attack Aiming to Hack Users’ Telegram Messenger Accounts
Block, the company formerly known as Square, has disclosed a data breach that involved a former employee downloading unspecified reports pertaining to its Cash App Investing that contained information about its U.S. customers.
“While this employee had… Continue reading Block Admits Data Breach Involving Cash App Data Accessed by Former Employee
The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world’s largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials.
The … Continue reading U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace
The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed.
“Data theft extortion or ransomware deployment follow… Continue reading FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks
Germany’s Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world’s largest illegal dark web marketplace that has cumulatively facilitated over $5 billion in Bitcoin transactions to d… Continue reading Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin