Malware

• 

  SonicWall Says Malicious NetExtender Client Used to Steal VPN Credentials

  SonicWall has warned customers about a malicious version of its SSL VPN NetExtender app that was used to steal VPN configurations and credentials. Threat actors modified two NetExtender application files, impacting organisations allowing remote network access. Both Microsoft and SonicWall have implemented measures to block the spread of these alter...

• 

  16 Billion Login Credentials Leaked in Massive Data Breach Impacting Apple, Google and More

  Cybersecurity researchers have discovered a “mysterious database” comprising a staggering 16 billion login credentials, in what is being called one of the biggest data breaches in history. According to a report, it impacted some of the world’s biggest technology companies including Apple, Facebook, and Google, along with government portals fr...

• 

  Google Shuts Down Malware That Leveraged Google Calendar to Steal Data

  Google Calendar was being used as a communication channel by a group of hackers to extract sensitive information from individuals, according to the Google Threat Intelligence Group (GTIG). The tech giant’s cybersecurity division discovered a compromised government website in October 2024 and found that malware was being spread using it. Once the ...

• 

  "Crime Is Bad": The Fall Of Russian Ransomware Giant LockBit

  The sudden fall of a ransomware supplier once described as the world's most harmful cybercrime group has raised questions about Moscow's role in its development and the fate of its founder.

• 

  Google Identifies Lostkeys, a Russian Malware That Can Steal Specific Files and Directories

  Google Threat Intelligence Group (GTIG) shared a report about a new piece of malware last week. The new malware, dubbed Lostkeys, is described as a data theft malware and is said to be linked with the Russian threat group Coldriver. Lostkeys is considered dangerous because it is being spread at the end of a multi-step chain that starts with a lure ...

• 

  LockBit Ransomware Group Reportedly Suffers Data Breach, Extortion Tactics Revealed

  LockBit, the notorious ransomware group, reportedly suffered a massive data breach on Wednesday. As per the report, the group’s dark web platform’s admin and affiliate panels were compromised to show a message and link to a MySQL database dump. The database reportedly contains 20 tables that include sensitive information around the cybercrimina...

• 

  iPhone Alert: Critical Security Flaw Puts Billions At Risk

  A security flaw in Apple's AirPlay could allow hackers to spread malware across devices, potentially leaving smart-home gadgets vulnerable.

• 

  FBI Warns Of Malware Risks In Free Online File Converters: Key Information You Need

  The FBI warns about cybercriminals using free file conversion tools to install malware, putting users at risk of data theft and ransomware attacks.

• 

  Malicious Machine Learning Models Discovered on Hugging Face: Report

  Hugging Face, the artificial intelligence (AI) and machine learning (ML) hub, is said to contain malicious ML models. A cybersecurity research firm discovered two such models that contain code that can be used to package and distribute malware to those who download these files. As per the researchers, threat actors are using a hard-to-detect method...

• 

  SparkCat Crypto Stealer Malware Infected Multiple Apps on Play Store, App Store

  Security researchers have discovered several apps on the App Store and Google Play infected with the SparkCat crypto stealer malware. The apps contained a malicious SDK using optical character recognition (OCR) to steal "crypto wallet recovery phrases" from users' screenshots. Notably, this is the first time such cryptocurrency-stealing malware has...

• 

  Your Phone Can Be Hacked Without Clicking A Link, WhatsApp Warns Users

  WhatsApp warns of a zero-click hack attack that compromised nearly 90 users' devices without them clicking on any malicious links, highlighting the sophistication and danger of this type of cyber attack.

• 

  KuCoin Pleads Guilty, Agrees to Pay Nearly $300 Million in US Crypto Case

  KuCoin has pleaded guilty on Monday to operating an unlicensed money transmitting business. Prosecutors said Seychelles-based KuCoin had been used to facilitate billions of dollars of suspicious transactions, and to transmit potential criminal proceeds including from darknet markets and malware, ransomware and fraud.

• 

  Crypto Scammers Are Reportedly Posing as Job Recruiters to Circulate Malware 

  Crypto scammers are using platforms like LinkedIn to reach out to job seekers, asking them to fix issues with video call software and subsequently injecting malicious malware to get access to the victims’ computers. 

• 

  India Tops Global List For Mobile Malware Attacks: Report

  In a startling revelation, India now tops the list for mobile malware attacks globally, surpassing the United States and Canada, with a disappointing step-up from its previous third-place ranking, according to a report.

• 

  SpyLoan Apps Installed on Over 8 Million Android Phones Amidst Rise in Predatory Loan Apps

  SpyLoan, a predatory loan application, has been detected on over 8 million Android devices, according to McAfee. Fifteen versions of the SpyLoan application have been removed or updated since they were identified, and users must remove these apps manually if they have already been downloaded.