Why the long-awaited Lightning ban still took Apple by surprise
You know how it is: you’ve got all year to do your Christmas shopping, but you always end up leaving it so late that you have to pay for premium delivery. Despite our best intentions…
December 2024
December 2024
New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide
Dec 16, 2024Ravie LakshmananCryptocurrency / Phishing Attack Cybersecurity researchers are calling attention to a new kind of investment scam that leverages a combination of social media malvertising, company-branded posts, and artificial intelligence (AI) powered video…
New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP
Cybersecurity researchers have discovered a new PHP-based backdoor called Glutton that has been put to use in cyber attacks targeting China, the United States, Cambodia, Pakistan, and South Africa. QiAnXin XLab, which discovered the malicious…
Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes
Dec 16, 2024Ravie LakshmananCyber Attack / Cyber Espionage The Security Service of Ukraine (SBU or SSU) has exposed a novel espionage campaign suspected to be orchestrated by Russia’s Federal Security Service (FSB) that involves recruiting…
Serbian police used Cellebrite to unlock, then plant spyware, on a journalist’s phone
This year, a Serbian journalist and an activist had their phones hacked by local authorities using a cellphone-unlocking device made by forensic tool maker Cellebrite. The authorities’ goal was not only to unlock the phones…
9 tweaks that turn off your Windows PC’s most annoying ads
Remember back when Windows 11 first came out and Microsoft gave everyone a free pass to upgrade? On the surface, it was a generous move; in actuality, it was a ploy to lure us away…
Rhode Island says personal data likely breached in social services cyberattack
State officials said hundreds of thousands of Rhode Island residents could be affected by a cyberattack on the state’s online portal for social services, with a “high probability” that personally identifiable information was breached. According…
Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action
Dec 14, 2024Ravie LakshmananBotnet / Ad Fraud Germany’s Federal Office of Information Security (BSI) has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold…
Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques
Dec 14, 2024Ravie LakshmananMalware / Cyber Threat Thai government officials have emerged as the target of a new campaign that leverages a technique called DLL side-loading to deliver a previously undocumented backdoor dubbed Yokai. “The…
Yearlong supply-chain attack targeting security pros steals 390K credentials
Screenshot showing a graph tracking mining activity. Credit: Checkmarx But wait, there’s more On Friday, Datadog revealed that MUT-1244 employed additional means for installing its second-stage malware. One was through a collection of at least…