article thumbnail

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware 72
article thumbnail

Read This If You Do Business in China

SecureWorld News

But the bank left out a critical detail about the software: it included malware.". Now, the Federal Bureau of Investigations (FBI) is jumping on the concerns surrounding this Chinese malware whack-a-mole. Trustwave called the backdoor GoldenSpy, issuing a warning about the threat. The companies received an uninstaller for the backdoor.

Malware 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Security and Windows 10 Will Cross Paths for Enterprises

CTOvision

1 area of spending increase in 2015, with nearly half (46%) planning to invest more in access control, intrusion prevention, and virus and malware protection. Multi-factor authentication for both cloud-based accounts and on-premise Active Directory will now be part of Windows, rather needing a hardware solution to complete.

Windows 150
article thumbnail

North Korean Threat Actors Targeting Healthcare Sector with Maui Ransomware

SecureWorld News

The figure below shows Maui command line usage details: The report continues: "Embedded usage instructions and the assessed use of a builder is common when there is an operational separation between developers and users of a malware family. Implementing HIPAA security measures can prevent the introduction of malware on the system.".

article thumbnail

Penetration Testing Remote Workers

SecureWorld News

Personal email addresses that may be on the same BYOD (Bring Your Own Device) assets. These are off limits regardless of where the BYOD is located, and organizations should use a Mobile Device Management (MDM) solution to provide email segmentation and data management.

Social 91
article thumbnail

Identify yourself for MIM - A Screw's Loose

A Screw's Loose

He was kind enough to place things like MDM (Mobile Device Management) and MAM (Mobile Application Management) in the diagram for us. They may choose to do straight authentication against your enterprise id system, could use a certificate to do the same thing, or go with a token provided through oauth or SAML. Innovation.