Tag: malware

More than a hundred backdoored malware repos traced to single GitHub user

Someone went to great lengths to prey on the next generation of cybercrooks

Lumma infostealer takedown may have inflicted only a flesh wound as crew keeps pinching and selling data

PLUS: Ransomware gang using tech support scam; Czechia accuses China of infrastructure attack; And more!

TeleMessage security SNAFU worsens as 60 government staffers exposed

PLUS: Interpol kills more malware; GoDaddy settles in awful infosec case; Giant stolen creds DB exposed

Suspected creeps behind DanaBot malware that hit 300K+ computers revealed

And the associated fraud'n'spy botnet is about to be shut down

Google's email spoofed by cunning phisherfolk who re-used DKIM creds

PLUS: Malware developers adopt Node.js; US disinformation warriors disbanded; Gig worker accounts for sale; and more

Europol: Five pay-per-infect suspects cuffed, some spill secrets to cops

Officials teased more details to come later this year

CISA spots spawn of Spawn malware targeting Ivanti flaw

Resurge an apt name for malware targeting hardware maker that has security bug after security bug

China’s FamousSparrow flies back into action, breaches US org after years off the radar

Crew also cooked up two fresh SparrowDoor backdoor variants, says ESET

Microsoft admits GitHub hosted malware that infected almost a million devices

Also, phone cleaner apps are a data-sucking scam, Singapore considering the literal rod for scammers, and more

With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare

244M purloined passwords added to Have I Been Pwned thanks to govt tip-off

200-plus impressively convincing GitHub repos are serving up malware

Plus: DOGE staff quit; LastPass PC, Mac gasp; and CISA warns Oracle and Adobe flaws under attack

China's Silver Fox spoofs medical imaging apps to hijack patients' computers

Sly like a PRC cyberattack

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet

FBI wipes Chinese PlugX malware from thousands of Windows PCs in America

Japanese police claim China ran five-year cyberattack campaign targeting local orgs

FireScam infostealer poses as Telegram Premium app to surveil Android devices

First-ever UEFI bootkit for Linux in the works, experts say

Swiss cheesed off as postal service used to spread malware

Don't open that 'copyright infringement' email attachment – it's an infostealer

Cybercrooks are targeting Bengal cat lovers in Australia for some reason

Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting

Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases

Perfctl malware strikes again as crypto-crooks target Docker Remote API servers

Pixel perfect Ghostpulse malware loader hides inside PNG image files

Necro malware continues to haunt side-loaders of dodgy Android mods

Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town

What a coincidence. Spyware makers, Russia's Cozy Bear seem to share same exploits

Proof-of-concept code released for zero-click critical IPv6 Windows hole

Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets

Breaking the economy of trust: How busts affect malware gangs

Five months after takedown, LockBit is a shadow of its former self

'LockBit of phishing' EvilProxy used in more than a million attacks every month

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis

FrostyGoop malware shut off heat to 600 Ukraine apartment buildings

Three words to send a chill down your spine: Snowflake. Intrusion. Alert

IcedID henchman gets nine years in clanger for abusing malware to drain bank accounts

China's APT41 crew adds a stealthy malware loader and fresh backdoor to its toolbox

Malware that is 'not ransomware' wormed its way through Fujitsu Japan's systems

Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

Baddies hijack Korean ERP vendor's update systems to spew malware

Microsoft tells yet more customers their emails have been stolen

Korean telco allegedly infected its P2P users with malware

Cybercrooks get cozy with BoxedApp to dodge detection

New Nork-ish cyberespionage outfit uncovered after three years

Euro cops disrupt malware droppers, seize thousands of domains

Suspected supply chain attack backdoors courtroom recording software

Microsoft confirms memory leak in March Windows Server security update

It's 2024 and North Korea's Kimsuky gang is exploiting Windows Help files

ChatGPT side-channel attack has easy fix: Token obfuscation

Chinese PC-maker Acemagic customized its own machines to get infected with malware

Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros

Raspberry Robin devs are buying exploits for faster attacks

Chinese Coathanger malware hung out to dry by Dutch defense department

Interpol's latest cybercrime intervention dismantles ransomware, banking malware servers

So, are we going to talk about how GitHub is an absolute boon for malware, or nah?

Google password resets not enough to stop these info-stealing malware strains

Cybercrooks book a stay in hotel email inboxes to trick staff into spilling credentials

Qakbot's backbot: FBI-led takedown keeps crims at bay for just 3 months

North Korea makes finding a gig even harder by attacking candidates and employers

Novel backdoor persists even after critical Confluence vulnerability is patched

MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts

Fresh find shines new light on North Korea’s latest macOS malware

BLOODALCHEMY provides backdoor to southeast Asian nations' secrets

GoldDigger Android trojan targets Vietnamese banking apps, code contains hints of wider targets

North Korea's Lazarus Group upgrades its main malware

T-Mobile US exposes some customer data – but don't call it a breach

Meatbag mishaps more menacing than malware? CISOs think so

Malware loader lowdown: The big 3 responsible for 80% of attacks so far this year

Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out

Undiplomatic Chinese threat actor attacks embassies and foreign affairs departments

Hijacked S3 buckets used in attacks on npm packages

Microsoft: Russia sent its B team to wipe Ukrainian hard drives

Last of the Gozi 3 sentenced over Windows info-stealing malware ops

Google puts $1M behind its promise to detect cryptomining malware

Ukraine war blurs lines between cyber-crims and state-sponsored attackers

Spotted: Suspected Russian malware designed to disrupt Euro, Asia energy grids

This legit Android app turned into mic-snooping malware – and Google missed it

Google settles location tracking lawsuit for only $39.9M

Ransomware-as-a-service groups rain money on their affiliates

No more macros? No problem, say miscreants, we'll adapt

Millions of mobile phones come pre-infected with malware, say researchers

EU proposes spyware Tech Lab to keep Big Brother governments in check