Microsoft has published an in-depth analysis of Adversary-in-the-Middle (AiTM) phishing attacks, which are becoming increasingly prevalent due to the widespread adoption of multi-factor authentication (MFA). The company underscored the critical need for advanced protective...
CYFIRMA has conducted an analysis of a malicious Android application designed to target high-value assets in South Asia. The sample was crafted using the SpyNote remote administration tool, suggesting that the targets may include...
The cryptocurrency exchange Rain.com, based in Bahrain, fell victim to a cyberattack in April, resulting in the theft of $16 million. An investigation revealed that the North Korean Lazarus Group orchestrated the attack, leveraging...
A critical vulnerability in the OpenWrt Attended Sysupgrade function, used to generate custom firmware images, could have been exploited to distribute malicious versions. OpenWrt, a Linux-based operating system designed for routers, access points, and...
Staff members of the U.S. Congress have been alerted to a phishing campaign in which unidentified individuals, impersonating government officials, are sending suspicious messages to lawmakers, urging them to download an encrypted messaging application....
According to a joint investigation by the Hungarian portal Direkt36 and the Belgian publication De Tijd, Hungary’s Intelligence Authority (IH) may have conducted surveillance on representatives of the European Anti-Fraud Office (OLAF) during their...
Acros Security has announced the discovery of a vulnerability in Microsoft Windows, affecting versions from Windows 7 onward, which could be exploited to steal user credentials. The flaw is associated with the NTLM (NT...
The Turla hacking group has adopted a sophisticated new strategy, leveraging the infrastructure of other cybercriminals to conduct covert operations. Research by Lumen reveals that the group infiltrated the networks of the Pakistani outfit...
iVerify has unveiled findings on infections caused by the commercial spyware Pegasus, discovered through scans of mobile devices. Of 2,500 scans conducted, seven devices were found compromised by this malicious software. The victims of...
The British telecom giant BT Group has faced a cyberattack attempt targeting a division within its legacy business structure. The hacker group Black Basta has claimed responsibility for the incident, listing the company’s name...
The U.S. Federal Trade Commission (FTC) has taken decisive action against companies that collected data from citizens’ mobile devices through apps and advertising platforms, subsequently providing this information to government agencies and other organizations....
The U.S. federal government has launched an investigation into a large-scale Chinese breach of global telecommunications systems discovered in late spring 2024. On Tuesday, officials warned that the intrusion is “ongoing” and likely more...
