Beware of Malicious Mandrake Apps From Google Play With Over 32,000 Installs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated Android spyware campaign known as Mandrake has resurfaced on the Google Play Store, infecting over 32,000 devices between 2022 and 2024. Mandrake has returned after a two-year break …

Operation ShadowCat Using Weaponized Office document To Attack Users In India

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers identified a new attack campaign (“Operation ShadowCat”) using malicious LNK files distributed via spam emails, which triggers a PowerShell script that drops a .NET loader and a decoy Word …

Threat Actors Using OS Command Injection Vulnerabilities To Compromise Systems, CISA Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

By exploiting OS command injection vulnerabilities, threat actors can run arbitrary commands on a host operating system to obtain unauthorized access, control, and the power to either corrupt or steal …

Hackers Exploiting MSHTML vulnerability to Deliver Atlantida Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Void Banshee, a threat actor, has been exploiting a critical MSHTML vulnerability, CVE-2024-38112, to distribute the Atlantida InfoStealer malware. This sophisticated campaign has targeted unsuspecting users by attracting PDF books …

Spyware Provider for Windows, Mac & Android Hacked, Sensitive Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TechCrunch has learned that Spytech, a little-known spyware maker based in Minnesota, has been hacked, exposing sensitive data from thousands of devices worldwide. The breach has unveiled the covert surveillance …

RADIUS Protocol Vulnerability Impacted Multiple Cisco Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the Remote Authentication Dial-In User Service (RADIUS) protocol has been disclosed, affecting multiple Cisco products. The vulnerability, CVE-2024-3596, allows an on-path attacker to forge RADIUS responses, …

Hackers Abuse Microsoft Office Forms to Launch Two-Step Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are increasingly using Microsoft Office Forms to launch sophisticated two-step phishing attacks. At present, certain individuals are being tricked into divulging their Microsoft 365 (M365) login information through Office Forms. …