article thumbnail

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware 73
article thumbnail

Google shuts down CryptBot malware operation that stole Chrome's user data

TechSpot

Cryptbot is a well-known security threat designed to identify and steal sensitive information from victims' computers, including passwords and authentication credentials, social media account logins, cryptocurrency wallets, and much more. Read Entire Article

Malware 108
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Google Takes Legal Action Against CryptBot Malware Distributors

SecureWorld News

Google has obtained a temporary court order to disrupt the distribution of CryptBot, a Windows-based information-stealing malware that has infected more than 670,000 computers in 2022. The harvested data is then sold to other attackers for use in data breach campaigns.

Malware 69
article thumbnail

Information Stealing Malware on the Rise, Uptycs Study Shows

SecureWorld News

A new study from Uptycs has uncovered an increase in the distribution of information stealing malware. Newly discovered stealer families include modules that specifically steal logs from MFA applications, like the Rhadamanthys malware. This demonstrates a focus on collecting data from multi-factor authentication tools.

Malware 63
article thumbnail

Social Engineering and Phishing

CTOvision

Social engineering is one of the most problematic attack techniques to combat. User education is most effective at stopping a social engineer. Users who are aware of the potential for social engineering attacks and learn to recognize them can use simple methods to thwart these attacks successfully. Stu Sjouwerman.

article thumbnail

Social Engineering 2.0: The Rise of Deepfake Phishing

SecureWorld News

And one of the most successful and increasingly prevalent ways of attack has come from social engineering, which is when criminals manipulate humans directly to gain access to confidential information. Social engineering is more sophisticated than ever, and its most advanced iteration is the topic of today's discussion: deepfakes.

article thumbnail

Don’t gamble with your identity verification practices

CIO Business Intelligence

I also emphasized that companies need to urgently review their employee access protocol, writing that companies must “ make it a point to do continuous employee training to help your teams avoid being duped by phishing and malware tactics.” It sounds simple, but it could be a hedge against similar social engineering and phishing hacks.