Tag: security
Google Chrome extensions remain a security risk as Manifest V3 fails to prevent data theft and malware exploitation
Research shows that Manifest V3 could suffer from security issues The upgraded Chromium manifest still allows malicious extensions Some security tools struggle to identify dangerous extensions Browser extensions have long been a convenient tool for users, enhancing productivity and streamlining tasks. However, they have also become a prime target for…
Read More
Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics
Phishing attacks are becoming more complex and harder to detect Attackers are using new techniques such as QR codes and deepfakes Some businesses are receiving 36 phishing emails per day Phishing attacks are consistently on the rise and becoming more sophisticated, as cybercriminals no longer rely solely on basic email…
Read More
This new phishing strategy utilizes GitHub comments to distribute malware
Github repositories are being infected with malware Trusted repositories can bypass secure web gateways Github comments are also being used to hide malicious files In a new phishing campaign detected by Cofense Intelligence, threat actors used a novel approach by leveraging trusted GitHub repositories to deliver malware. The campaign is…
Read More
This new malware utilizes a rare programming language to evade traditional detection methods
New custom malware loader written in JPHP is wreaking havoc The custom payload is difficult to detect using cybersecurity tools The malware-loader can deploy custom payloads as required Trustwave SpiderLabs says it has recently uncovered a new form of malware known as Pronsis Loader, which is already causing trouble due…
Read More
A new form of macOS malware is being used by devious North Korean hackers
BlueNoroff seen targeting crypto businesses with new piece of malware The malware establishes persistence and opens up a back door It can download additional payloads, run Shell commands, and more Devious North Korean state-sponsored threat actors known as BlueNoroff have been spotted deploying a brand new piece of malware to…
Read More
Scammers are using fake copyright infringement claims to hack businesses
Researchers spot new phishing campaign distributing Rhadamanthys infostealer The crooks are impersonating entertainment, media, and tech firms The campaign is automated and abuses Gmail Scammers have been spotted sending out fake copyright infringement violation claims as part of a new phishing campaign aiming to spread the latest version of the…
Read More