WhatsApp phishing email campaign uses voice message alerts as a lure
Information stealing malware dropped when users fall for the phishing emails about WhatsApp voice messages The newest WhatsApp phishing campaign impersonates the voice message
Know the risks before they reach you
News
State-sponsored hackers use the Russia-Ukraine war for attack campaigns
Multiple hacker groups took advantage of the conflict in Ukraine to distribute their malware and cyber espionage campaigns Many reports of hacker and malware
Apple emergency update fixes issues leading to iPhone and Mac hacks
The emergency update released to patch two serious zero-day vulnerabilities Apple aims to address two zero-day vulnerabilities exploited by malicious attackers with the security
News, Web browsers and vulnerabilities
Spring Java bug allows remote code execution and can be new Log4Shell
The new RCE bug in Spring Cloud allows the unauthenticated remote code executions on applications Researchers warn about the new zero-day vulnerability in the
Transparent Tribe campaign targeting Indian government officials
The hacking campaign has spread backdoor malware to targets since June 2021 Threat actors most likely linked with Pakistanian hackers groups released another backdoor
Okta admits the Lapsus$ hack that hit service providers and customers
Okta reports making a mistake over the breach notifications The company says it was not okay to stay silent about the breach that took
CISA reports 66 actively exploited security flaws – patching available
Security flaws can be used by attack vectors and security agency wants that hackers exploit them commonly The US Cybersecurity and Infrastructure Security Agency
iPhone and Android users lose cryptocurrency due to copycat apps
Experts report that apps mimicking legitimate digital wallet services manage to siphon funds from smartphone users Researchers uncover the scheme that uses trojanized Android
Deadbolt ransomware comes back and infects more than 1100 QNAP devices
Another wave of the ransomware attack started mid-March on QNAP The ransomware resurfaced again with a new attack on the network-attached storage devices from
Chinese hacker Mustang Panda deploy new Hodur malware around
Mustang Panda group releases new variant of the malware with similar tricks from older threats China-based advanced persistent threat group Mustang Panda has been
Okta investigates a data breach: 15k of potentially affected customers
Businesses like Peloton, T-Mobile, and FCC are on high alert due to the breach that possibly caused by Lapsus$ group The authentication company used
News, Web browsers and vulnerabilities
Browser-in-the-browser attack enables undetected phishing campaigns
The browser-in-the-browser attacks come with pre-made templates for fake Chrome pop-ups Phishing campaigns now can be undetected because this toolkit allows anyone to create
Google: initial access brokers work to help Conti ransomware group
Tactics of the access broker working with Conti and Diavol ransomware gangs exposed Google Threat Analysis group reported that threat actors focused on financial
Phishing attack: fake Instagram emails threatening account shutdowns
Insurance company targeted by the Instagram support staff email campaign Phishing scams spread around trying to steal login information from users. Instagram emails threatening
What do cryptocurrency ups and downs mean to cyber threats?
Cryptocurrency and malicious threat actors go hand in hand in this digital world Ransomware and other threats keep on using cryptocurrency as their main