Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters

Blog WriterThe Hacker News - Original news source is thehackernews.com

Law enforcement agencies in Italy and Spain have dismantled an organized crime group linked to the Italian Mafia that was involved in online fraud, money laundering, drug trafficking, and property crime, netting the gang about €10 million ($11.7 million) in …

A New Wave of Malware Attack Targeting Organizations in South America

Blog WriterThe Hacker News - Original news source is thehackernews.com

A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote access trojans (RATs) and geolocation filtering to avoid detection, according to new research. Cybersecurity firm Trend Micro …

Google to Auto-Reset Unused Android App Permissions for Billions of Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Friday said it’s bringing an Android 11 feature that auto-resets permissions granted to apps that haven’t been used in months, to devices running Android versions 6 and above. The expansion is expected to go live later this year …

Numando: A New Banking Trojan Targeting Latin American Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly spotted banking trojan has been caught leveraging legitimate platforms like YouTube and Pastebin to store its encrypted, remote configuration and commandeer infected Windows systems, making it the latest to join the long list of malware targeting Latin America (LATAM) after …

New Malware Targets Windows Subsystem for Linux to Evade Detection

Blog WriterThe Hacker News - Original news source is thehackernews.com

A number of malicious samples have been created for the Windows Subsystem for Linux (WSL) with the goal of compromising Windows machines, highlighting a sneaky method that allows the operators to stay under the radar and thwart detection by popular …

Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

Blog WriterThe Hacker News - Original news source is thehackernews.com

A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale cyber offensives for extended periods of time while staying under …

Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control of vulnerable devices. The flaw — dubbed “Seventh Inferno” (CVSS …

Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk of further attacks. The issue — tracked as CVE-2021-41077 — concerns unauthorized …

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday disclosed details of a targeted phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on compromised Windows systems. “These attacks used the vulnerability, tracked as CVE-2021-40444, …

You Can Now Sign-in to You Microsoft Accounts Without a Password

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification code sent via SMS or email. The change is expected …