Security News

Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams
2024-03-05 10:53

A new DNS threat actor dubbed Savvy Seahorse is leveraging sophisticated techniques to entice targets into fake investment platforms and steal funds. “Savvy Seahorse is a DNS threat actor who...

How Cybercriminals are Exploiting India's UPI for Money Laundering Operations
2024-03-04 13:50

Cybercriminals are using a network of hired money mules in India using an Android-based application to orchestrate a massive money laundering scheme. The malicious application, called XHelper, is...

Cybercriminals harness AI for new era of malware development
2024-03-01 06:30

Group-IB found these compromised credentials within the logs of information-stealing malware traded on illicit dark web marketplaces. Throughout the reporting period, Group-IB experts uncovered 27 new advertisements for ransomware-as-a-service programs on dark web forums, including well known groups such as Qilin, as well as other collectives that have yet to be seen in the wild.

Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks
2024-02-22 11:07

A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities. "SSH-Snake is a self-modifying worm that leverages SSH...

Cybercriminals are stealing iOS users' face scans to break into mobile banking accounts
2024-02-15 14:00

Cybercriminals are targeting iOS users with malware that steals Face ID scans to break into and pilfer money from bank accounts - thought to be a world first. iOS target Android and iOS respectively, tricking users into performing biometric verification checks that are ultimately used to bypass the same checks employed by legitimate banking apps in Vietnam and Thailand - the geographic focus of these ongoing attacks.

Cybercriminals get productivity boost with AI
2024-02-14 04:30

This growth's unintended side effect is an ever-expanding attack surface that, coupled with the availability of easily accessible and criminally weaponized generative AI tools, has increased the need for highly secure remote identity verification. "Generative AI has provided a huge boost to threat actors' productivity levels: these tools are relatively low cost, easily accessed, and can be used to create highly convincing synthesized media such as face swaps or other forms of deepfakes that can easily fool the human eye as well as less advanced biometric solutions. This only serves to heighten the need for highly secure remote identity verification," says Andrew Newell, Chief Scientific Officer, iProov.

Cybercriminals replace familiar tactics to exfiltrate sensitive data
2024-01-31 04:30

Ransomware attacks are increasing again as cybercriminals' motivation shifts to data exfiltration, according to Delinea. The familiar tactics of crippling a company and holding it hostage have been replaced by new strategies that use stealth to exfiltrate private and sensitive data.

Cybercriminals embrace smarter strategies, less effort
2024-01-29 04:30

2024 is shaping up to be a record-breaking year for data breaches, according to Experian.With increased data collection, storage, and movement, there are plenty of partners down the supply chain that could be targeted.

Syrian Hackers Distributing Stealthy C#-Based Silver RAT to Cybercriminals
2024-01-08 14:04

Threat actors operating under the name Anonymous Arabic have released a remote access trojan (RAT) called Silver RAT that’s equipped to bypass security software and stealthily launch hidden...

Cybercriminals set their sights on crypto markets
2024-01-02 04:00

The cryptocurrency market has grown significantly, attracting both enthusiasts and investors. The rise of cryptocurrencies has also brought forth an unprecedented need for cybersecurity measures.