Researchers have uncovered a dangerous new mobile banking Trojan dubbed Crocodilus actively targeting financial institutions and cryptocurrency platforms. The malware employs advanced techniques like remote device control, stealthy overlays, and social engineering to steal sensitive data, marking a significant escalation…
Gamaredon Hackers Weaponize LNK Files to Deliver Remcos Backdoor
Cisco Talos has uncovered an ongoing cyber campaign by the Gamaredon threat actor group, targeting Ukrainian users with malicious LNK files to deliver the Remcos backdoor. Active since at least November 2024, this campaign employs spear-phishing tactics, leveraging themes related…
BSidesLV24 – IATC – Time Is Up. You Have Three Years, 3 Months, 3 Weeks, To Protect Your Stuff. What Do You Do?
Author/Presenter: Josh Corman, Aanne Isam Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel. Permalink The…
Künstliche Intelligenz auf dem Prüfstand: AGI-Test deckt Schwächen aktueller KI-Modelle auf
Wie nah sind Unternehmen wie OpenAI einer AGI tatsächlich? Ein neuer Benchmark-Test zeigt: KI-Modelle haben noch immer große Intelligenzlücken und Menschen sind ihnen im Vergleich deutlich überlegen. Dieser Artikel wurde indexiert von t3n.de – Software & Entwicklung Lesen Sie den…
Google Maps-Zeitachse gelöscht: Dieser Trick könnte eure verlorenen Daten retten
Ein Bug in Google Maps hat dafür gesorgt, dass zahlreiche User:innen ihre Timeline-Daten verloren haben. Jetzt hat sich Google zu dem Problem zu Wort gemeldet. Das Problem: Nicht alle User:innen bekommen ihre Maps-Daten wieder. Dieser Artikel wurde indexiert von t3n.de…
Dr. Google im Wandel: Sind KI-Tools tatsächlich nützlich für Gesundheitsberatung?
Google will den Einsatz seiner KI-Modelle im Gesundheitsbereich erweitern. Die neuen Tools sollen Patient:innen, Ärzt:innen und die Forschung gleichermaßen unterstützen – stoßen aber auch auf Skepsis. Dieser Artikel wurde indexiert von t3n.de – Software & Entwicklung Lesen Sie den originalen…
FBI and DOJ seize $8.2 Million in romance baiting crypto fraud scheme
The U.S. DOJ seized over $8.2 million in USDT stolen through ‘romance baiting’ scams, where victims are tricked into fake investments promising high returns. On February 27, 2025, the U.S. Attorney’s Office in Ohio filed a civil forfeiture complaint for…
CISA Warns of ESURGE Malware Exploiting Ivanti RCE Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a Malware Analysis Report (MAR-25993211-r1.v1) detailing the exploitation of a critical vulnerability in Ivanti Connect Secure devices (CVE-2025-0282). This vulnerability allows attackers to gain unauthorized access and deploy sophisticated malware variants,…
Lotus Blossom APT Exploits WMI for Post-Exploitation Activities
The Lotus Blossom Advanced Persistent Threat (APT) group, also known as Lotus Panda, Billbug, and Spring Dragon, has intensified its cyberespionage efforts with new variants of the Sagerunex backdoor. These developments highlight the group’s evolving tactics, including leveraging Windows Management…
Datenleck: 1,5 Millionen private Fotos von Dating-Apps für LGBTQ+ enthüllt
iOS-Dating-Apps für LGBTQ+-, BDSM- und Sugar-Daddy-Communitys haben viele Nutzerfotos kompromittiert. Darunter sind explizite Bilder aus privaten Nachrichten. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: Datenleck: 1,5 Millionen private Fotos von Dating-Apps für LGBTQ+ enthüllt
Experts warn of the new sophisticate Crocodilus mobile banking Trojan
The new Android trojan Crocodilus exploits accessibility features to steal banking and crypto credentials, mainly targeting users in Spain and Turkey. ThreatFabric researchers discovered a new Android trojan called Crocodilus, which exploits accessibility features to steal banking and crypto credentials.…
Don’t make this USB mistake! Protect your data with this discounted encrypted gadget
Kingston’s IronKey is one of the most secure USBs you can buy, from a military-standardized build to a complex passphrase mode. This article has been indexed from Latest stories for ZDNET in Security Read the original article: Don’t make this…
Frankenstein Scam: Here’s How to Safeguard Yourself Against Synthetic Identity Fraud
Identity theft is not always as straightforward as acquiring one person’s information; stolen identities can be put together from several sources. This rising crime, known as synthetic identity fraud or “Frankenstein fraud,” involves combining someone’s Social Security number with…
IT Security News Hourly Summary 2025-03-29 18h : 2 posts
2 posts were published in the last hour 16:7 : BSI-Studie: Zahlreiche Schwachstellen in Krankenhausinformationssystemen 16:6 : Ransomware Found in VSCode Extensions Raises Concerns Over Microsoft’s Security Review
BSI-Studie: Zahlreiche Schwachstellen in Krankenhausinformationssystemen
IT-Sicherheitsforscher haben im BSI-Auftrag IT-Systemen für Kliniken auf den Zahn gefühlt und Lücken gefunden, etwa bei Verschlüsselung und Zertifikaten. Dieser Artikel wurde indexiert von heise security News Lesen Sie den originalen Artikel: BSI-Studie: Zahlreiche Schwachstellen in Krankenhausinformationssystemen
Ransomware Found in VSCode Extensions Raises Concerns Over Microsoft’s Security Review
Cybersecurity experts have discovered ransomware hidden within two Visual Studio Code (VSCode) Marketplace extensions, raising concerns about Microsoft’s ability to detect malicious software in its platform. The compromised extensions, named “ahban.shiba” and “ahban.cychelloworld,” were downloaded by users before security…
Twitter (X) Hit by Data Leak of 2.8 Billion Users; Allegedly an Insider Job
Massive Twitter (X) data breach exposes details of 2.8 billion users; alleged insider leak surfaces with no official response from the company. This article has been indexed from Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News Read the…
Babuk Locker 2.0 vs Seceon Platform: MITRE ATT&CK Mapping and Early-Stage Detection & Remediation
Overview of Babuk Locker 2.0 Babuk Locker 2.0 is a ransomware strain that employs double extortion, where attackers encrypt victim files and exfiltrate sensitive data for ransom. It targets organizations by exploiting RDP vulnerabilities, unpatched systems, weak credentials, and phishing…
Evolution Of Cyber Threats: Why Attack Surface Management Is Critical Today
“Your organization’s attack surface is bigger than you think.” As digital transformation accelerates, businesses, government agencies, and financial institutions in India are expanding their digital footprints—often unknowingly. Every new cloud… The post Evolution Of Cyber Threats: Why Attack Surface Management…
X (Twitter) Largest Data Breach Ever? 2.8 Billion User Info Leaked
Massive Twitter (X) data breach exposes details of 2.8 billion users; alleged insider leak surfaces with no official response from the company. This article has been indexed from Hackread – Latest Cybersecurity, Tech, AI, Crypto & Hacking News Read the…
Beware the “Dream Vacation” Nightmare: Unmasking Travel Package Spam and Protecting Yourself
The luxury vacations with low prices sound great, but they can be a trap. These days, travel package… The post Beware the “Dream Vacation” Nightmare: Unmasking Travel Package Spam and Protecting Yourself appeared first on Hackers Online Club. This article…
IT Security News Hourly Summary 2025-03-29 15h : 7 posts
7 posts were published in the last hour 13:39 : Cybersicherheit: Kriminelle wollten Arbeitslosengeld erbeuten 13:38 : News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus 13:5 : ChatGPT wird höflicher: OpenAI optimiert KI-Konversationen für bessere User-Erfahrung 13:5…
Cybersicherheit: Kriminelle wollten Arbeitslosengeld erbeuten
Bei Angriffen auf Nutzerkonten bei der Bundesagentur für Arbeit wurden Kontonummern für die Auszahlung von Leistungen geändert. (Cybercrime, Security) Dieser Artikel wurde indexiert von Golem.de – Security Lesen Sie den originalen Artikel: Cybersicherheit: Kriminelle wollten Arbeitslosengeld erbeuten
News alert: SquareX discloses nasty browser-native ransomware that’s undetectable by antivirus
Palo Alto, Calif., Mar 28, 2025, CyberNewswire — From WannaCry to the MGM Resorts Hack, ransomware remains one of the most damaging cyberthreats to plague enterprises. Chainalysis estimates that corporations spend nearly $1 billion dollars on ransom each year, but…