July 2024 – Page 3

Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware

Japanese organizations are the target of a Chinese nation-state threat actor that leverages malware families like LODEINFO and NOOPDOOR to harvest sensitive information from compromised hosts while stealthily remaining under the radar in some cases for a time period ranging from two to three years.
Israeli cybersecurity company Cybereason is tracking the campaign under the name Cuckoo Spear,

How To Get the Most From Your Security Team’s Email Alert Budget

We’ll TL;DR the FUDdy introduction: we all know that phishing attacks are on the rise in scale and complexity, that AI is enabling more sophisticated attacks that evade traditional defenses, and the never-ending cybersecurity talent gap means we’re all struggling to keep security teams fully staffed.
Given that reality, security teams need to be able to monitor and respond to threats

DigiCert Revoking Many Certificates Due to Verification Issue

DigiCert is immediately revoking many certificates due to a domain validation issue, which could cause disruption to sites, apps and services.

The post DigiCert Revoking Many Certificates Due to Verification Issue appeared first on SecurityWeek.

Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes

A new malicious campaign has been observed making use of malicious Android apps to steal users’ SMS messages since at least February 2022 as part of a large-scale campaign.
The malicious apps, spanning over 107,000 unique samples, are designed to intercept one-time passwords (OTPs) used for online account verification to commit identity fraud.
“Of those 107,000 malware samples, over 99,000 of

Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known cyber espionage group known as XDSpy.
The findings come from cybersecurity firm F.A.C.C.T., which said the infection chains lead to the deployment of a malware called DSDownloader. The activity was observed this month, it added.
XDSpy is a threat actor of indeterminate origin that was first

Senate Passes Bill to Protect Kids Online and Make Tech Companies Accountable for Harmful Content

The US Senate has passed a bill to protect kids online and make tech companies accountable for harmful content.

The post Senate Passes Bill to Protect Kids Online and Make Tech Companies Accountable for Harmful Content appeared first on SecurityWeek.

Company Paid Record-Breaking $75 Million to Ransomware Group: Report

Zscaler is aware of a company that paid a record-breaking $75 million ransom to the Dark Angels ransomware group.

The post Company Paid Record-Breaking $75 Million to Ransomware Group: Report appeared first on SecurityWeek.

Meta Agrees to $1.4B Settlement With Texas in Privacy Lawsuit Over Facial Recognition

Meta has agreed to a $1.4 billion settlement with Texas in a privacy lawsuit over a facial recognition feature.

The post Meta Agrees to $1.4B Settlement With Texas in Privacy Lawsuit Over Facial Recognition appeared first on SecurityWeek.

Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S. state of Texas over allegations that it illegally collected biometric data of millions of users without their permission, marking one of the largest penalties levied by regulators against the tech giant.
“This historic settlement demonstrates our commitment to standing up to

Massive SMS stealer campaign infects Android devices in 113 countries

A malicious campaign targeting Android devices worldwide utilizes thousands of Telegram bots to infect devices with SMS-stealing malware and steal one-time 2FA passwords (OTPs) for over 600 services. […]

Month: July 2024