The threat actors behind the Mispadu banking Trojan have become the latest to exploit a now-patched Windows SmartScreen security bypass flaw to compromise users in Mexico.
The attacks entail a new variant of the malware that was first observed in 2019, Palo Alto Networks Unit 42 said in a report published last week.
Propagated via phishing mails, Mispadu is a Delphi-based information stealer
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-05 00:07:042024-02-05 00:07:04General Timothy Haugh Takes Lead of NSA and Cyber Command
It’s crucial to note that this sale of compromised AnyDesk accounts isn’t connected to the security breach incident disclosed by the company on February 2, 2024.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-04 21:13:242024-02-04 21:13:24Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-04 20:06:362024-02-04 20:06:36China’s Hackers Keep Targeting US Water and Electricity Supplies
Noteworthy stories that might have slipped under the radar: Palo Alto Networks ordered to pay $150 million in patent lawsuit, identity solutions firms get big funding, government hacker techniques.
The hackers claimed to have accessed over 100 terabytes of Albania’s geographic information system and population data, although the institute denied that recent census data was compromised.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-03 09:07:352024-02-03 09:07:35Iran-Linked Hackers Claim Attack on Albania’s Institute of Statistics
The Passenger Rail Agency of South Africa (PRASA) reported a loss of 30.6 million rand due to a phishing scam, with only half of the stolen money recovered. Insider threats, such as ghost email accounts, are suspected.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-03 08:07:502024-02-03 08:07:50South African Railways Lost Over $1M in Phishing Scam
The attackers disguise the email to appear as if it’s from a legitimate brand, using social engineering techniques to lure recipients into clicking on what seems to be an embedded voicemail but is actually a credential harvesting page.
Heads of top crime syndicates extradited to China are implicated in pig-butchering “fraud dens,” but four individuals on China’s most-wanted list still remain at large.
https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png00https://www.backbox.org/wp-content/uploads/2018/09/website_backbox_text_black.png2024-02-03 05:09:012024-02-03 05:09:01Myanmar Hands Over Mob Bosses in Cyber-Fraud Bust
BackBox.org offers a range of Penetration Testing services to simulate an attack on your network or application. If you are interested in our services, please contact us and we will provide you with further information as well as an initial consultation.
New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw
/in General NewsThe threat actors behind the Mispadu banking Trojan have become the latest to exploit a now-patched Windows SmartScreen security bypass flaw to compromise users in Mexico.
The attacks entail a new variant of the malware that was first observed in 2019, Palo Alto Networks Unit 42 said in a report published last week.
Propagated via phishing mails, Mispadu is a Delphi-based information stealer
The Hacker News – Read More
General Timothy Haugh Takes Lead of NSA and Cyber Command
/in General NewsGeneral Timothy D. Haugh assumed command of NSA and USCYBERCOM on February 2, 2024, taking over the role from General Paul M. Nakasone.
The post General Timothy Haugh Takes Lead of NSA and Cyber Command appeared first on SecurityWeek.
SecurityWeek – Read More
Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web
/in General NewsBy Waqas
It’s crucial to note that this sale of compromised AnyDesk accounts isn’t connected to the security breach incident disclosed by the company on February 2, 2024.
This is a post from HackRead.com Read the original post: Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
China’s Hackers Keep Targeting US Water and Electricity Supplies
/in General NewsPlus: Russia was likely behind widespread GPS outages, Vault 7 leaker was sentenced, police claim to trace Monero cryptocurrency, and more.
Security Latest – Read More
AnyDesk Urges Password Change Amid Security Breach
/in General NewsBy Deeba Ahmed
Another day, another security breach.
This is a post from HackRead.com Read the original post: AnyDesk Urges Password Change Amid Security Breach
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers
/in General NewsNoteworthy stories that might have slipped under the radar: Palo Alto Networks ordered to pay $150 million in patent lawsuit, identity solutions firms get big funding, government hacker techniques.
The post In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers appeared first on SecurityWeek.
SecurityWeek – Read More
Iran-Linked Hackers Claim Attack on Albania’s Institute of Statistics
/in General NewsThe hackers claimed to have accessed over 100 terabytes of Albania’s geographic information system and population data, although the institute denied that recent census data was compromised.
Cyware News – Latest Cyber News – Read More
South African Railways Lost Over $1M in Phishing Scam
/in General NewsThe Passenger Rail Agency of South Africa (PRASA) reported a loss of 30.6 million rand due to a phishing scam, with only half of the stolen money recovered. Insider threats, such as ghost email accounts, are suspected.
Cyware News – Latest Cyber News – Read More
Fake Voicemail as Credential Harvesting Lure
/in General NewsThe attackers disguise the email to appear as if it’s from a legitimate brand, using social engineering techniques to lure recipients into clicking on what seems to be an embedded voicemail but is actually a credential harvesting page.
Cyware News – Latest Cyber News – Read More
Myanmar Hands Over Mob Bosses in Cyber-Fraud Bust
/in General NewsHeads of top crime syndicates extradited to China are implicated in pig-butchering “fraud dens,” but four individuals on China’s most-wanted list still remain at large.
darkreading – Read More