article thumbnail

Microsoft Suspends Dev Accounts That Used Its Certs to Authenticate Malware

IT Toolbox

Multiple threat actors have leveraged malware signed with fraudulently obtained certificates to deploy Hive and possibly other ransomware. The post Microsoft Suspends Dev Accounts That Used Its Certs to Authenticate Malware appeared first on.

Malware 246
article thumbnail

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware 72
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Hackers are using Punycode to create authentic-looking URLs in Google ads

TechSpot

A common tactic for getting people to download and install malware is to trick them into clicking a search ad disguised as the legit company that makes the desired software. Malwarebytes reports that attackers now use Punycode in Google Ads to make their URLs look even more authentic. Read Entire Article

article thumbnail

Google shuts down CryptBot malware operation that stole Chrome's user data

TechSpot

Cryptbot is a well-known security threat designed to identify and steal sensitive information from victims' computers, including passwords and authentication credentials, social media account logins, cryptocurrency wallets, and much more. Read Entire Article

Malware 105
article thumbnail

Cookie theft threat: When Multi-Factor authentication is not enough

Tech Republic Security

A lot of companies have deployed multi-factor authentication, yet attackers have some ways to bypass it—the most used one being cookie theft. The post Cookie theft threat: When Multi-Factor authentication is not enough appeared first on TechRepublic.

article thumbnail

Free Smartwatches Are Vector to Hit Military Personnel with Malware

SecureWorld News

Army's Criminal Investigation Division (CID) is urging military personnel to be on the lookout for unsolicited, suspicious smartwatches in the mail, warning that the devices could be rigged with malware. You're compromising your personal and/or professional data with malware." Worst case?

Malware 79
article thumbnail

Google Takes Legal Action Against CryptBot Malware Distributors

SecureWorld News

Google has obtained a temporary court order to disrupt the distribution of CryptBot, a Windows-based information-stealing malware that has infected more than 670,000 computers in 2022. The harvested data is then sold to other attackers for use in data breach campaigns.

Malware 70