Security News

SuperCard X Android Malware Enables Contactless ATM and PoS Fraud via NFC Relay Attacks
2025-04-21 15:13

A new Android malware-as-a-service (MaaS) platform named SuperCard X can facilitate near-field communication (NFC) relay attacks, enabling cybercriminals to conduct fraudulent cashouts. The active...

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery
2025-04-21 07:01

Cybersecurity researchers have disclosed a surge in "mass scanning, credential brute-forcing, and exploitation attempts" originating from IP addresses associated with a Russian bulletproof hosting...

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures
2025-04-20 04:58

The Russian state-sponsored threat actor known as APT29 has been linked to an advanced phishing campaign that's targeting diplomatic entities across Europe with a new variant of WINELOADER and a...

New Android malware steals your credit cards for NFC relay attacks
2025-04-19 15:17

A new malware-as-a-service (MaaS) platform named 'SuperCard X' has emerged, targeting Android devices via NFC relay attacks that enable point-of-sale and ATM transactions using compromised payment...

Chinese hackers target Russian govt with upgraded RAT malware
2025-04-18 13:43

Chinese-speaking IronHusky hackers are targeting Russian and Mongolian government organizations using upgraded MysterySnail remote access trojan (RAT) malware. [...]

Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader
2025-04-18 12:03

A new multi-stage attack has been observed delivering malware families like Agent Tesla variants, Remcos RAT, and XLoader. "Attackers increasingly rely on such complex delivery mechanisms to evade...

Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT
2025-04-18 07:10

Cybersecurity researchers are warning of continued risks posed by a distributed denial-of-service (DDoS) malware known as XorDDoS, with 71.3 percent of the attacks between November 2023 and...

State-Sponsored Hackers Weaponize ClickFix Tactic in Targeted Malware Campaigns
2025-04-17 11:32

Multiple state-sponsored hacking groups from Iran, North Korea, and Russia have been found leveraging the increasingly popular ClickFix social engineering tactic to deploy malware over a...

Node.js Malware Campaign Targets Crypto Users with Fake Binance and TradingView Installers
2025-04-17 08:57

Microsoft is calling attention to an ongoing malvertising campaign that makes use of Node.js to deliver malicious payloads capable of information theft and data exfiltration. The activity, first...

Russians lure European diplomats into malware trap with wine-tasting invite
2025-04-16 12:29

Vintage phishing varietal has improved with age Russia never stops using proven tactics, and its Cozy Bear, aka APT 29, cyber-spies are once again trying to lure European diplomats into...