#rhadamanthys-infostealer
#rhadamanthys-infostealer
[ follow ]
#cybersecurity #malware #data-breach #supply-chain-attack #north-korea #social-engineering #axios #vulnerabilities
#data-breach
Privacy professionals
fromSilicon Canals
2 days agoA fintech app asked users for their passports - then left 360,000 files unprotected for five years - Silicon Canals
A money transfer app exposed over 360,000 sensitive files on a public server for nearly five years, including unencrypted personal documents.
fromTNW | Data-Security
4 days agoHasbro hacked: Peppa Pig & Transformers owner warns of weeks of disruption
Hasbro disclosed unauthorized access to its systems, an intrusion first detected on 28 March that has since forced the company to take parts of its infrastructure offline and warn that product deliveries could be delayed for weeks.
London startup
#malware
Information security
fromThe Hacker News
3 days agoResearchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners
Operation REF1695 uses fake installers to deploy RATs and cryptocurrency miners, monetizing infections through CPA fraud since November 2023.
Privacy professionals
fromComputerworld
3 weeks agoCyber criminals too are working from home... your home
The FBI warns that cybercriminals use residential proxies to mask illegal activities by hijacking IoT devices, smartphones, and routers, threatening both consumers and enterprises, particularly older devices.
Information security
fromThe Hacker News
2 weeks agoNew Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
Perseus, a new Android malware evolved from Cerberus and Phoenix, actively targets users through dropper apps for device takeover and financial fraud, with primary focus on Turkey and Italy.
fromSecuritymagazine
2 weeks agoTargeted Phishing Attack Breaches Biotech Company Data
This phishing attack enabled the threat actor to access 'certain internal IT business applications.' The malicious actor gained unauthorized entry by compromising an employee's access to the organization's internal network for business administration.
Information security
Information security
fromTheregister
1 month agoDouble whammy: Steaelite RAT bundles data theft, ransomware
Steaelite, a new remote access trojan sold on cybercrime networks, enables double extortion attacks on Windows machines through ransomware, data theft, credential stealing, and live surveillance controlled via a centralized browser-based dashboard.
fromThe Hacker News
1 month agoInfostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens
Cybersecurity researchers disclosed they have detected a case of an information stealer infection successfully exfiltrating a victim's OpenClaw (formerly Clawdbot and Moltbot) configuration environment. "This finding marks a significant milestone in the evolution of infostealer behavior: the transition from stealing browser credentials to harvesting the 'souls' and identities of personal AI [artificial intelligence] agents," Hudson Rock said. Alon Gal, CTO of Hudson Rock, told The Hacker News that the stealer was likely a variant of Vidar based on the infection details.
Information security
fromThe Hacker News
1 month agoFrom Ransomware to Residency: Inside the Rise of the Digital Parasite
To be clear, ransomware isn't going anywhere, and adversaries continue to innovate. But the data shows a clear strategic pivot away from loud, destructive attacks toward techniques designed to evade detection, persist inside environments, and quietly exploit identity and trusted infrastructure. Rather than breaking in and burning systems down, today's attackers increasingly behave like Digital Parasites. They live inside the host, feed on credentials and services, and remain undetected for as long as possible.
Information security
[ Load more ]