article thumbnail

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware 74
article thumbnail

Google shuts down CryptBot malware operation that stole Chrome's user data

TechSpot

Cryptbot is a well-known security threat designed to identify and steal sensitive information from victims' computers, including passwords and authentication credentials, social media account logins, cryptocurrency wallets, and much more.

Malware 113
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

More connected, less secure: Addressing IoT and OT threats to the enterprise

CIO Business Intelligence

It also introduces new security challenges that demand our attention, especially as IoT is integrated into operational technology (OT) environments. 6 IoT vulnerabilities to watch out for Security risks are a significant concern for businesses using LoT and OT technology.

article thumbnail

Free Smartwatches Are Vector to Hit Military Personnel with Malware

SecureWorld News

Army's Criminal Investigation Division (CID) is urging military personnel to be on the lookout for unsolicited, suspicious smartwatches in the mail, warning that the devices could be rigged with malware. You're compromising your personal and/or professional data with malware." Worst case?

Malware 79
article thumbnail

Cookie theft threat: When Multi-Factor authentication is not enough

Tech Republic Security

A lot of companies have deployed multi-factor authentication, yet attackers have some ways to bypass it—the most used one being cookie theft. The post Cookie theft threat: When Multi-Factor authentication is not enough appeared first on TechRepublic.

article thumbnail

Two security flaws in the TPM 2.0 specs put cryptographic keys at risk

TechSpot

Security researchers recently discovered a couple of flaws in the Trusted Platform Module (TPM) 2.0 Exploiting the flaws is only possible from an authenticated local account, but a piece of malware running on an affected.

article thumbnail

GoDaddy Reports Multi-Year Breach of Its Servers and Malware Campaign

SecureWorld News

Web hosting provider GoDaddy has revealed it suffered a security breach that lasted for several years, resulting in the installation of malware on its servers and the theft of source code related to some of its services. It is also recommending that customers enable multi-factor authentication (MFA) for added security.

Malware 87