Scaly Wolf’s new loader: the right tool for the wrong job

The BI.ZONE Threat Intelligence team has uncovered a fresh campaign by the group targeting Russian and Belarusian organizations. The threat actors are distributing phishing emails under the guise of a federal agency. The emails have a legitimate document as an Read More …

Australia: Cybercrime detectives arrest man following alleged 1 million NSW clubs customer records data breach

A Sydney man has been arrested by police over an alleged data breach of personal information of members and patrons from at least 17 licensed clubs in New South Wales and the ACT. An unauthorised website claimed to have published Read More …

Android Remote Access Trojan Equipped to Harvest Credentials

The SonicWall Capture Labs threat research team has been regularly sharing information about malware targeting Android devices. The researchers encountered similar RAT samples before, but this one includes extra commands and phishing attacks designed to harvest credentials. This malware uses Read More …

Spain reopens Israeli spyware probe, sharing information with France

Spain’s High Court on Tuesday reopened an investigation into the use of Israeli cyber-intelligence firm NSO Group’s Pegasus software to spy on Prime Minister Pedro Sanchez and other Spanish politicians. The investigators will share information with France, where politicians and Read More …

United Nations investigating potential ransomware attack after data ripped from IT systems

Hackers managed to break into the United Nations Development Programme (UNDP) IT systems in Copenhagen, stealing a wide range of sensitive data. Ransomware gang 8Base has claimed responsibility, posting on its own website that the group had managed to get Read More …

ToddyCat is making holes in your infrastructure

Kapersky researchers continue covering the activities of the APT group ToddyCat. In their previous article, they described tools for collecting and exfiltrating files (LoFiSe and PcExter). This time, the researchers have investigated how attackers obtain constant access to compromised infrastructure, what Read More …

Grindr facing UK lawsuit over alleged data protection breaches

Gay dating app Grindr is facing a mass data protection lawsuit in London from hundreds of users who allegedly had their private information, including HIV status, shared with third parties without consent, a law firm said on Monday. Austen Hayes, Read More …

Discord’s updated Terms of Service are exactly the wrong response to its recent data breaches

It seems that Discord has been in the news for one reason or another lately, ranging from layoffs to massive privacy breaches and information theft by third parties. And now there’s something new on the horizon — one that may Read More …

Singapore: Personal information of parents, staff at 127 schools accessed in data security breach

A data breach at one of its vendors has resulted in the “unauthorised access” of names and email addresses of parents and staff from five primary and 122 secondary schools, the Ministry of Education (MOE) said on Friday (Apr 19). Read More …

Trust Wallet Issues Warning to Apple Users About Zero-Day Exploit in iMessage

Trust Wallet, a popular web3 wallet, has issued a warning to Apple users, urging them to disable iMessage due to “credible intel” regarding a zero-day exploit. The company shared the alert on X, stating that the exploit, which is being Read More …