How Android malware lets thieves access your ATM cash

New Android malware NGate steals NFC payment codes in real-time, allowing criminals to withdraw cash from ATMs without your ...

Malicious Blender model files deliver StealC infostealing malware

A Russian-linked campaign delivers the StealC V2 information stealer malware through malicious Blender files uploaded to 3D ...

New banking malware can stealth-hack your Android phone: Here's how to stay safe

A new Android malware enables a large-scale banking fraud by creating fake screens and secretly taking over your phone.

Zapier NPM Hack Unleashes Self-Spreading Worm Attack

Each infected version has the ability to automatically spread itself to thousands of other repositories without any human ...
The Hacker News

Hackers Hijack Blender 3D Assets to Deploy StealC V2 Data-Stealing Malware

Malicious CGTrader .blend files abuse Blender Auto Run to install StealC V2, raiding browsers, plugins, and crypto wallets.
Security Boulevard

Nevada’s Trojan Download, Penn’s 1.2M Donor Breach, and the Malware That Kills Your Defenses First

In Nevada, a state employee downloaded what looked like a harmless tool from a search ad. The file had been tampered with, and that single moment opened the door to months of silent attacker movement ...
SecurityWeek

WormGPT 4 and KawaiiGPT: New Dark LLMs Boost Cybercrime Automation

Palo Alto Networks researchers have conducted an analysis of two recently launched dark LLMs: WormGPT 4 and KawaiiGPT.
WeLiveSecurity

Influencers in the crosshairs: How cybercriminals are targeting content creators

Social media influencers can provide reach and trust for scams and malware distribution. Robust account protection is key to ...
Infosecurity Magazine

New FlexibleFerret Malware Chain Targets macOS With Go Backdoor

A new macOS malware chain using staged scripts and a Go-based backdoor has been attributed to FlexibleFerret, designed to steal credentials and maintain system access ...
Hosted on MSN

Watch out for this fake ‘Windows Update’ malware scam that’s going around

Security researchers from Huntress are warning the public about a new variant of ClickFix, one of the most popular scam ...
Dark Reading

Infamous Shai-hulud Worm Resurfaces From the Depths

New variant executes malicious code during preinstall, significantly increasing potential exposure in build and runtime ...
Security Boulevard

FAQ About Sha1-Hulud 2.0: The “Second Coming” of the npm Supply-Chain Campaign

Sha1-Hulud malware is an aggressive npm supply-chain attack compromising CI/CD and developer environments. This blog addresses frequently asked questions and advises cloud security teams to ...