Tag: security

Dangerous Android banking malware looks to trick victims with fake money transfers

ToxicPanda can initiate money transfers and even grab MFA codes The banking trojan is targeting consumers in Europe and Latin America More than 1,500 devices already compromised A Chinese hacker is targeting Android devices in Europe and Latin America with a banking trojan able to steal money from victim’s accounts.…

Read More

Sophos Firewall hack on government network used an all-new custom malware

Security researchers from UK’s NCSC share more details about the tools used in Pacific Rim Pygmy Goat is a competent backdoor likely used by the Chinese Even the FBI is asking for help to identify the crooks For the past five years, the Chinese have been targeting edge devices belonging…

Read More

Synology tells NAS device users to patch immediately following zero-day reveal

Synology has patched a zero-click flaw found in multiple NAS products This type of flaw can be exploited with no victim interaction, making it particularly dangerous Technical details were not disclosed to give customers time to react Top network-attached storage (NAS) makers Synology has patched a critical severity vulnerability which…

Read More

Singtel targeted by Chinese hackers in “test run” for attacks on US targets

Anonymous tipsters say Singtel was breached in June 2024 The group behind the attack is Volt Typhoon, a known state-sponsored actor Assault was reportedly a test run before attacks on telecoms in the US Infamous Chinese cyber-espionage threat actor Volt Typhoon, allegedly tied to the country’s government, breached Singtel last…

Read More

Hundreds of malware-laden fake npm packages posted online to try and trick developers

Criminals are adding hundreds of malicious packages to npm The packages try to fetch a stage-two payload to infect the machines The crooks went to lengths to hide where they host the malware Software developers, especially those working with cryptocurrencies, are once again facing a supply chain attack via open…

Read More

Schneider Electric says developer platform was breached, company data stolen

The company is currently investigating the attack The hacker claims to have stolen 40 GB of compressed data Schneider Electric’s Jira system was breached Schneider Electric has confirmed suffering its second cyberattack and data leak in recent months. Earlier this week, a threat actor alias Greppy added a new post…

Read More