3+ day, 3+ hour ago   (383+ words) MantaxOtax Android malware has combined file encryption with extensive surveillance, letting attackers steal messages, credentials and device data while restricting access to infected phones. In a technical write up published on September 9, Zimperium's zLabs team linked the malware to Indonesian…...

4+ day, 2+ hour ago   (455+ words) A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject malicious JavaScript into their own browsers, in a scheme aimed at people willing to commit fraud. Cisco Talos said in research…...

1+ week, 3+ day ago   (405+ words) A phishing-as-a-service (PaaS) operation has continued generating new campaigns despite a coordinated takedown effort, with more than 700 new phishing pages identified within a month of the disruption. Group-IB said its researchers had tracked the Outsider Phishing Kit, operated by a…...

2+ week, 5+ day ago   (371+ words) A phishing platform dubbed ZeroTokens allows attackers live visibility into victim sessions and the ability to change subsequent prompts in real time, allowing attacks to adapt in real time while targeting credentials and financial information. The platform allowed an operator…...

2+ week, 5+ day ago   (310+ words) A large-scale malware-spreading scheme targeting Minecraft players has continued to evolve despite the takedown of the threat actor’s malicious infrastructure in July. In a new report, researchers at McAfee shared that over 6300 attempts to access malicious sites linked to the…...

3+ week, 3+ day ago   (330+ words) Security researchers have warned of a new variant of a prolific Android banking Trojan which substantially expands its potential victim count. ToxicPanda 2.0 was discovered by Zimperium’s zLabs team, the mobile security vendor wrote in a post on August 19. Most notable…...

3+ week, 3+ day ago   (443+ words) Attendees of cybersecurity conferences should be on the lookout for malicious outreach following the event, according to a new Huntress blog which details one such interaction. The post, published on August 19, explained that a researcher for the security vendor was…...

3+ week, 4+ day ago   (335+ words) A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader, giving attackers a way to distribute malware while disabling endpoint security processes. In a new advisory published earlier today, eSentire’s Threat Response Unit…...