Category Archive

Malware typically mimics mobile antivirus applications to trick users into installing the mimicked AV app, which claims to provide trust and secure devices for users. Malware could easily go unnoticed and get a first grip on the device by cloning …

Hackers mainly aim at Windows systems as they are widely adopted and dominate the market, consequently, threat actors will achieve maximum financial gain or theft of data from them compared to other operating systems. In addition, the presence of numerous …

Cybersecurity experts have found a new banking Trojan horse for Android smartphones. It’s called Antidot. This clever malware pretends to be a real Google Play update app so people will download it. Once installed, Antidot takes over most of the …

The Andariel APT group launched a targeted attack campaign against South Korean domestic companies and institutions, where manufacturing, construction, and educational sectors were hit.  The attackers deployed backdoors like Nestdoor, keyloggers, infostealers, and proxy tools to compromise systems, steal data, …

Two UC Santa Cruz students found a major security flaw in CSC ServiceWorks laundry machines. Over a million internet-connected laundry machines in homes, hotels, and colleges worldwide are affected by the bug, which allows people to run them for free. …

A new Android banking Trojan, Antidot, emerged in May 2024, which steals credentials through overlay attacks and has various functionalities for complete device control. Antidot uses VNC, keylogging, screen recording, and call forwarding to capture sensitive information.  It can also …

Hackers use loaders to bypass security measures and run harmful code in a genuine process’s memory themselves.  This makes it possible for malware payloads to be quietly loaded into the system without being discovered by any of the many file …

A security researcher identified a vulnerability in TeslaLogger, a third-party software used to collect data from Tesla vehicles, that leveraged insecure default settings that could be exploited to gain unauthorized access to TeslaLogger instances.  Reported the issue to the TeslaLogger …

Threat intelligence feeds provide real-time updates on indicators of compromise (IOCs), such as malicious IPs and URLs. Security researchers and organizations share IOCs with feed vendors, who then analyze and validate them before distributing the information to subscribers.  Security systems …