New Android Banking Trojan Spreading via Google Play Store Targets Europeans

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new Android banking trojan with over 50,000 installations has been observed distributed via the official Google Play Store with the goal of targeting 56 European banks and carrying out harvesting sensitive information from compromised devices. Dubbed Xenomorph by Dutch security firm …

Iranian State Broadcaster IRIB Hit by Destructive Wiper Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

An investigation into the cyberattack targeting Iranian national media corporation, Islamic Republic of Iran Broadcasting (IRIB), in late January 2022 resulted in the deployment of a wiper malware and other custom implants, as the country’s national infrastructure continues to face …

A Free Solution to Protect Your Business from 6 Biggest Cyber Threats in 2022

Blog WriterThe Hacker News - Original news source is thehackernews.com

For the last few years, the cybersecurity threat landscape has gotten progressively more complex and dangerous. The online world is now rife with data thieves, extortionists, and even state actors looking to exploit vulnerabilities in businesses’ digital defenses.  And unfortunately …

Hackers Exploiting Infected Android Devices to Register Disposable Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

An analysis of SMS phone-verified account (PVA) services has led to the discovery of a rogue platform built atop a botnet involving thousands of infected Android phones, once again underscoring the flaws with relying on SMS for account validation. SMS …

Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have detailed what they call the “first successful attempt” at decrypting data infected with Hive ransomware without relying on the private key used to lock access to the content. “We were able to recover the master key for generating …

Justice Department Appoints First Director of National Cryptocurrency Enforcement Team

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice (DoJ) earlier this week appointed Eun Young Choi to serve as the first Director of the National Cryptocurrency Enforcement Team (NCET) it established last year. The NCET was created to tackle the criminal misuse of cryptocurrencies and …

U.S. Cybersecurity Agency Publishes List of Free Security Tools and Services

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday published a repository of free tools and services to enable organizations to mitigate, detect, and respond effectively to malicious attacks and further improve their security posture. The “Free Cybersecurity Services and Tools” …

Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million Sites

Blog WriterThe Hacker News - Original news source is thehackernews.com

Patches have been issued to contain a “severe” security vulnerability in UpdraftPlus, a WordPress plugin with over three million installations, that can be weaponized to download the site’s private data using an account on the vulnerable sites. “All versions of …

Microsoft Warns of ‘Ice Phishing’ Threat on Web3 and Decentralized Networks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has warned of emerging threats in the Web3 landscape, including “ice phishing” campaigns, as a surge in adoption of blockchain and DeFi technologies emphasizes the need to build security into the decentralized web while it’s still in its early stages. The …

PseudoManuscrypt Malware Spreading the Same Way as CryptBot Targets Koreans

Blog WriterThe Hacker News - Original news source is thehackernews.com

Numerous Windows machines located in South Korea have been targeted by a botnet tracked as PseudoManuscrypt since at least May 2021 by employing the same delivery tactics of another malware called CryptBot. “PseudoManuscrypt is disguised as an installer that is …