Over 800 Android Apps Targeted in PIN-Stealing Trojan Campaign

Four Android banking malware campaigns are targeting more than 800 apps by abusing overlays, Accessibility permissions, and sideloaded fake apps to steal PINs.

The post Over 800 Android Apps Targeted in PIN-Stealing Trojan Campaign appeared first on TechRepublic.

Security Archives – TechRepublic – ​Read More

Crypto infrastructure company blames $290 million theft on North Korean hackers

A theft of nearly $300 million worth of cryptocurrency has been attributed to hackers from North Korea, as the industry grapples with the fallout of a wide-ranging incident involving multiple prominent platforms.

The Record from Recorded Future News – ​Read More

North Korea hackers blamed for $290M crypto theft

The hack against Kelp DAO is the largest crypto heist of the year so far.

Security News | TechCrunch – ​Read More

Mastodon says its flagship server was hit by a DDoS attack

The DDoS attack against Mastodon’s flagship server comes less than a week after Bluesky was targeted with junk web traffic.

Security News | TechCrunch – ​Read More

Fake TikTok Downloaders on Chrome and Edge Spying on 130,000 Users

Over 130,000 users are at risk from fake TikTok downloader extensions on Chrome and Microsoft Edge. Researchers discovered these malicious tools use device fingerprinting to spy on users and steal sensitive browser data.

Hackread – Cybersecurity News, Data Breaches, AI and More – ​Read More

Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking

Forescout researchers discovered 20 new vulnerabilities in Lantronix and Silex products and described theoretical attack scenarios.

The post Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking appeared first on SecurityWeek.

SecurityWeek – ​Read More

Bluesky blames app outage on ‘sophisticated’ DDoS attack

The decentralized social network said the incident began on April 15, when the company received reports of intermittent outages affecting the app.

The Record from Recorded Future News – ​Read More

Hackers Abuse QEMU for Defense Evasion

The machine emulator has been abused in at least two different campaigns distributing ransomware and remote access tools.

The post Hackers Abuse QEMU for Defense Evasion appeared first on SecurityWeek.

SecurityWeek – ​Read More

Bluesky Disrupted by Sophisticated DDoS Attack

A pro-Iran hacker group has taken credit for the attack on Bluesky, which appears to have lasted 24 hours. 

The post Bluesky Disrupted by Sophisticated DDoS Attack appeared first on SecurityWeek.

SecurityWeek – ​Read More

British hacker tied to Scattered Spider campaign pleads guilty in $8M scheme

A British hacker pleaded guilty in U.S. federal court to participating in a sweeping cybercrime campaign that siphoned at least $8 million in cryptocurrency from companies and individuals, federal prosecutors said.

The Record from Recorded Future News – ​Read More