article thumbnail

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware 76
article thumbnail

Information Stealing Malware on the Rise, Uptycs Study Shows

SecureWorld News

A new study from Uptycs has uncovered an increase in the distribution of information stealing malware. Incidents have more than doubled in Q1 2023, indicating a disturbing trend that threatens global organizations. This demonstrates a focus on collecting data from multi-factor authentication tools.

Malware 67
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

More connected, less secure: Addressing IoT and OT threats to the enterprise

CIO Business Intelligence

billion devices reported in 2023. Weak authentication and authorization: One of the foremost vulnerabilities in IoT deployments stems from inadequate authentication and authorization practices. In fact, two notorious botnets, Mirai and Gafgyt, are major contributors to a recent surge in IoT malware attacks.

article thumbnail

Report: Attackers Move Lightning Fast to Capitalize on  Vulnerabilities

SecureWorld News

This morning, the Qualys Threat Research Unit released its 2023 Threat Landscape Year in Review report. In 2023, the Qualys Threat Research Unit (TRU) witnessed a critical trend in exploiting high-risk vulnerabilities. The mean time to exploit vulnerabilities in 2023 stands at approximately 44 days (about one-and-a-half months).

Report 79
article thumbnail

3 ways to deter phishing attacks in 2023

CIO Business Intelligence

Unsurprisingly, there’s more to phishing than email: Email phishing: Attackers send emails with attachments that inject malware in the system when opened or malicious links that take the victim to a site where they’re tricked into revealing sensitive data.

Training 140
article thumbnail

MacStealer Extracts Docs, Cookies, Login Info from MacOS Users

SecureWorld News

Structured telemetry and analytics cybersecurity firm Uptycs has discovered a new macOS malware stealer it is calling MacStealer. It joins three Windows-based malware families using Telegram in 2023, including Titan Stealer, Parallax RAT, and HookSpoofer, all of which exploit stealer command and control (C2). "

Malware 82
article thumbnail

7 ChatGPT scams to look out for

Dataconomy

FraudGPT : Scammers’ secret to stealing your data ChatGPT-generated email scam Emails, a notorious scamming medium, have been used to disseminate malware, extort victims, or pilfer crucial information. In April 2023, several media outlets started flagging a surge of phishing emails explicitly crafted by ChatGPT.

Malware 69