New Trick Could Let Malware Fake iPhone Shutdown to Spy on Users Secretly

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a novel technique by which malware on iOS can achieve persistence on an infected device by faking its shutdown process, making it impossible to physically determine if …

VMware Patches Important Bug Affecting ESXi, Workstation and Fusion Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMWare has shipped updates to Workstation, Fusion, and ESXi products to address an “important” security vulnerability that could be weaponized by a threat actor to take control of affected systems. …

New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification

Blog WriterThe Hacker News - Original news source is thehackernews.com

An ongoing ZLoader malware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft’s digital signature verification to siphon user credentials and sensitive information. Israeli cybersecurity company Check …

Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have taken the wraps of an organized financial-theft operation undertaken by a discreet actor to target transaction processing systems and siphon funds from entities primarily located in Latin …

Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than 100 real estate websites operated by Sotheby’s Realty that involved injecting malicious skimmers to …

Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage of security vulnerabilities uncovered in the Log4j open-source logging framework to deploy malware on vulnerable systems. “Exploitation …

Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Trojanized installers of the Telegram messaging application are being used to distribute the Windows-based Purple Fox backdoor on compromised systems. That’s according to new research published by Minerva Labs, describing …

Researchers Detail New HomeKit ‘doorLock’ Bug Affecting Apple iOS

Blog WriterThe Hacker News - Original news source is thehackernews.com

A persistent denial-of-service (DoS) vulnerability has been discovered in Apple’s iOS mobile operating system that’s capable of sending affected devices into a crash or reboot loop upon connecting to an …