article thumbnail

Mobile Malware Uses Deepfakes, Social Engineering to Bypass Biometric Authentication

SecureWorld News

A sophisticated form of mobile malware dubbed "GoldPickaxe" has been uncovered, which collects facial recognition data to produce deepfake videos, enabling hackers to bypass biometric authentication protections on banking apps. The malware has been active since 2023, specifically targeting victims in Vietnam and Thailand.

Malware 74
article thumbnail

Recently reported Microsoft zero-day gaining popularity with attackers, Kaspersky says

Tech Republic Security

A flaw in the MSHTML engine that lets an attacker use a malicious Office document to install malware is currently being used against the energy, industrial, banking, medical tech, and other sectors.

Malware 214
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Social Engineering and Phishing

CTOvision

Social engineering is one of the most problematic attack techniques to combat. User education is most effective at stopping a social engineer. Users who are aware of the potential for social engineering attacks and learn to recognize them can use simple methods to thwart these attacks successfully. Stu Sjouwerman.

article thumbnail

Information Stealing Malware on the Rise, Uptycs Study Shows

SecureWorld News

A new study from Uptycs has uncovered an increase in the distribution of information stealing malware. Newly discovered stealer families include modules that specifically steal logs from MFA applications, like the Rhadamanthys malware. Examining the dark web reveals that infostealer malware has become increasingly widespread.

Malware 63
article thumbnail

North Korean Hackers Intensify Cyberattacks on South's Arms Industry

SecureWorld News

The group employed sophisticated spear-phishing, watering hole attacks, and kernel-level malware to compromise the targets. DPRK groups, such as Lazarus, frequently reuse not only their malware but also their network infrastructure, which can be both a vulnerability and a strength in their operations. currently Hanwha Ocean Co.

article thumbnail

Understanding the Essential Pillars of Phishing Mitigation

SecureWorld News

These attackers have criminal intent, as they'll lure in victims by claiming to be a friend, family member, bank, or other well-known companies and websites. Malware and attackers can "break in" in various ways. Social engineering has its tells, though.

article thumbnail

3 ways to deter phishing attacks in 2023

CIO Business Intelligence

In fact, CIO has reported that it takes only a few minutes for experienced hackers to set up a social engineering attack against enterprises (and their managed service providers) that consider themselves to be secure and protected. Deploy email authentication standards on enterprise email servers to check and verify inbound emails.

Training 140