Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only…
Tag: MALWARE
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators.
Israeli Ad Firm Built a Spyware Pipeline Inside the Online Advertising System, Researchers Say
An Israeli advertising company quietly turned the infrastructure of targeted digital ads into a delivery mechanism for mercenary spyware, according to new…
Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection
Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered…
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow…
Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks
Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, alongside new delivery…
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud.…
AdFection Zero-Click Spyware Attack Hits Al Jazeera
Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech’s global…
New Aoki Malware Targets ChatGPT, Claude, Codex and Gemini to Steal Credentials
Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek…
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access…
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager
PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a…
Midnight Blizzard-Linked Hackers Use Claude AI to Rebuild Malware and Evade Detection
Hackers linked to Midnight Blizzard used Anthropic’s Claude AI to rebuild malware after security tools detected it, helping them keep espionage operations…
XWorm RAT Evolves Into Advanced Surveillance Malware
Remote access trojan (RAT) XWorm has developed into an advanced surveillance threat whose capabilities extend beyond data theft and remote system control.…
Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers
CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click…
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident…
Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware
A new version of GhostBat Android malware is targeting users of 60 banking, UPI, wallet, fintech and payment apps in India. The malware can abuse…
Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room
Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge Cybersecurity Today Host David Shipley reports on…
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad…
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads.