5+ day, 4+ hour ago   (323+ words) Cryptocurrency wallet manufacturer Trezor has revealed that a breach at a key shipping partner has affected 67,000 more customers than originally thought. The new victim count represents a 479% increase on the original estimate. Read more on Trezor: Major Phishing Campaign Targets…...

2+ day, 17+ hour ago   (383+ words) MantaxOtax Android malware has combined file encryption with extensive surveillance, letting attackers steal messages, credentials and device data while restricting access to infected phones. In a technical write up published on September 9, Zimperium's zLabs team linked the malware to Indonesian…...

2+ day, 18+ hour ago   (489+ words) The FBI has published its first ever Cyber Strategy, providing guidance on how the agency investigates and disrupts cyber threat actors. The new document, published on September 9, highlights the need for strategic response to escalating cyber-attacks perpetrated by financially-motivated cybercriminals…...

3+ day, 15+ hour ago   (457+ words) The Gigabud Android banking trojan has been equipped to clone banking apps into a separate Android work profile, giving fraudsters a way to break the link between a malware alert and the transaction that follows it. Group-IB said in research…...

3+ day, 16+ hour ago   (455+ words) A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject malicious JavaScript into their own browsers, in a scheme aimed at people willing to commit fraud. Cisco Talos said in research…...

5+ day, 18+ hour ago   (424+ words) Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent to…...

5+ day, 19+ hour ago   (377+ words) North Korea's Lazarus umbrella operates as six distinct cyber clusters, according to a new analysis of the country's offensive cyber capabilities. Sekoia and Kudelski Security said the organization reflected a broader effort by North Korea to distribute cyber operations across…...

5+ day, 21+ hour ago   (381+ words) Law firms are circling after reports emerged last week of a potential mega-breach of driver’s license information. At least four class-action lawsuits have been filed in the US District Court for the Eastern District of Louisiana against IDScan.net, the…...

1+ week, 2+ day ago   (405+ words) A phishing-as-a-service (PaaS) operation has continued generating new campaigns despite a coordinated takedown effort, with more than 700 new phishing pages identified within a month of the disruption. Group-IB said its researchers had tracked the Outsider Phishing Kit, operated by a…...

1+ week, 2+ day ago   (440+ words) A member of Serbia's student protest movement has been infected with NSO Group's Pegasus spyware through an iMessage zero-click exploit, according to a forensic investigation by the Citizen Lab and the SHARE Foundation. The Citizen Lab said it found high-confidence…...