#Malware

#Malware

SambaSpy malware targets Italian users via phishing, likely testing before broader attacks.

First, phishing emails with HTML attachments or links are used to initiate infections. [ more ]

Infostealer malware significantly increases the risk of ransomware attacks by exfiltrating sensitive credentials. [ more ]

North Korean cyber actors are using social engineering via LinkedIn to distribute malware like RustDoor, primarily targeting the cryptocurrency sector. [ more ]

The Lazarus Group is targeting developers by masquerading as recruiters to deliver malware via fake coding tests.

Security leaders are urged to adopt precautionary measures to combat the बढ़ती threats posed by the Lazarus Group. [ more ]

A malware named Android.Vo1d has infected 1.3 million streaming devices, but the cause of infection remains undetermined. [ more ]

TrickMo, a sophisticated Android banking trojan, uses advanced evasion tactics and fake login screens to steal banking credentials. [ more ]

uWSGI is in maintenance mode; developers should consider alternatives.

Rust extensions can improve Python performance with better memory management.

Malicious Python packages are being used in fake recruitment schemes. [ more ]

The U.S. has issued a $2.5 million bounty for Belarusian malware developer Volodymyr Kadariya, linked to major cyber crime operations involving the Angler exploit kit. [ more ]

Vladimir Kadariya, key figure behind the Angler Exploit Kit, is wanted for cybercrimes defrauding millions; a $2.5M reward is offered for information leading to his capture. [ more ]

Malware cleverly combines nostalgia with horror game mechanics, playing on users' fears of compromise through interactive EULA and installation processes. [ more ]

Google's Pixel devices shipped with potential security vulnerabilities due to dormant software pre-installed on devices since 2017. [ more ]

StormBamboo, a Chinese-speaking threat actor, conducted a sophisticated cyberespionage attack by compromising an ISP and altering DNS responses to deliver malicious payloads alongside legitimate software updates. [ more ]