3+ day, 40+ min ago   (383+ words) MantaxOtax Android malware has combined file encryption with extensive surveillance, letting attackers steal messages, credentials and device data while restricting access to infected phones. In a technical write up published on September 9, Zimperium's zLabs team linked the malware to Indonesian…...

6+ day, 1+ hour ago   (424+ words) Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent to…...

1+ week, 3+ day ago   (425+ words) A P2P botnet thought to have been running for over two decades, has suffered significant disruption thanks to a US-led law enforcement operation. Carried out on August 31, the operation against the Sality botnet brought together authorities from Bulgaria, Hungary, Romania, and…...

1+ week, 3+ day ago   (427+ words) A Russian man has been extradited to the US over allegations that he helped distribute malware to approximately 80,000 users of a freelance employment platform between 2016 and 2017. The US Department of Justice (DoJ) said Searzhudin Tamirlanovich Aktulaev, 40, was arrested in Cyprus…...

1+ week, 4+ day ago   (520+ words) US healthcare provider Nutex Health has disclosed that a threat actor has stolen sensitive data, including of patients, and threatened to publish it online. The Texas-based firm, which delivers care through facilities throughout the US, made the notification in an…...

1+ week, 4+ day ago   (372+ words) A threat group claiming responsibility for a breach of the UK’s largest airport group appears to have leaked almost all of the 550GB of data it stole online. FulcrumSec posted the data for download on its leak site, claiming to have…...

1+ week, 5+ day ago   (397+ words) One of America’s largest healthcare distributors is investigating a serious data breach which notorious threat actor ShinyHunters has claimed responsibility for. However, the firm revealed in a statement on August 28 that it was investigating an incident “involving third-party applications and…...

2+ week, 2+ day ago   (471+ words) Aurora ransomware actors have been observed abusing SpaceX’s AI Cursor Agent as part of exploitation campaigns, according to a new study by Gambit Security’s Threat Intelligence team. The threat actors ran Claude Sonnet through Cursor Agent to assist with various…...

3+ week, 3+ day ago   (335+ words) A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader, giving attackers a way to distribute malware while disabling endpoint security processes. In a new advisory published earlier today, eSentire’s Threat Response Unit…...

3+ week, 5+ day ago   (487+ words) Nearly three-quarters of ransomware victims since 2023 were mid-sized organizations with $10m to $1bn in revenue, according to a new Black Kite study. The third-party risk specialist analyzed 13,336 disclosed incidents dating back to January 2023, as well as a separate security scan of 120,128 mid-market…...