International Authorities Take Down Flubot Malware Network
The info-stealing trojan used SMS messages and lifted contact credentials to spread with unprecedented speed across Android devices globally since December 2020.
Read More
Being prepared for adversarial attacks
There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for? For this episode of the Threatpost podcast, I am joined by Derek Manky…
Read MoreCritical UNISOC Chip Vulnerability Affects Millions of Android Smartphones
A critical security flaw has been uncovered in UNISOC’s smartphone chipset that could be potentially weaponized to disrupt a smartphone’s radio communications through a malformed packet.
“Left unpatched, a hacker or a military unit can leverage such a…
SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that’s being used in phishing attacks against Pakistani public and private sector entities.
“Phishing links in emails or posts that mimic legitimate notificatio…
SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that’s being used in phishing attacks against Pakistani public and private sector entities.
“Phishing links in emails or posts that mimic legitimate notificatio…
SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that’s being used in phishing attacks against Pakistani public and private sector entities.
“Phishing links in emails or posts that mimic legitimate notificatio…
SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that’s being used in phishing attacks against Pakistani public and private sector entities.
“Phishing links in emails or posts that mimic legitimate notificatio…
DOJ Seizes 3 Web Domains Used to Sell Stolen Data and DDoS Services
The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of three domains used by cybercriminals to trade stolen personal information and facilitate distributed denial-of-service (DDoS) attacks for hire.
This includes weleakinfo[.]to, i…
New Unpatched Horde Webmail Bug Lets Hackers Take Over Server by Sending Email
A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
“Once the email is …
FluBot Android Spyware Taken Down in Global Law Enforcement Operation
An international law enforcement operation involving 11 countries has culminated in the takedown of a notorious mobile malware threat called FluBot.
“This Android malware has been spreading aggressively through SMS, stealing passwords, online banking …