Dic 12, 2023 Marina Londei Attacchi, In evidenza, Minacce, News, RSS 0 I ricercatori di ESET hanno individuato 18 applicazioni Android malevole che collezionavano i dati sensibili degli utenti. Soprannominate “SpyLoan” dai ricercatori, le applicazioni fingevano di offrire agli utenti prestiti ad alto tasso di interesse e al contempo raccoglievano i dati personali e finanziari ..
Tag : malware
Enlarge / A woman scans a QR code in a café to see the menu online. reader comments 51 The US Federal Trade Commission has become the latest organization to warn against the growing use of QR codes in scams that attempt to take control of smartphones, make fraudulent charges, or obtain personal information. Short ..
reader comments 33 Stealthy and multifunctional Linux malware that has been infecting telecommunications companies went largely unnoticed for two years until being documented for the first time by researchers on Thursday. Researchers from security firm Group-IB have named the remote access trojan “Krasue,” after a nocturnal spirit depicted in Southeast Asian folklore “floating in mid-air, ..
Nov 22, 2023 Marina Londei Attacchi, Malware, News, RSS 0 Gamaredon, un gruppo di cyberspionaggio legato al governo russo, ha esteso il suo raggio d’azione oltre l’Ucraina ed è arrivato a colpire organizzazioni negli Stati Uniti, in Vietnam, in Cile, in Polonia e in Germania. Sembra però che l’espansione non sia stata volontaria, ma dovuta ..
Nov 15, 2023 Marina Londei Approfondimenti, Hacking, Prodotto, RSS, Tecnologia 0 Nel discutere dei rischi legati all’intelligenza artificiale si parla spesso della possibilità di usare i chatbot e altre tecnologie simili per velocizzare lo sviluppo di malware e scalare la dimensione delle campagne di attacchi. Per prevenire gli usi scorretti della propria tecnologia OpenAI ha ..
Malicious Python packages posing as obfuscators have been targeting developers with malware that takes control over the infected systems, application security firm Checkmarx warns. Featuring names that start with ‘pyobf’ and masquerading as tools typically used by developers, the malicious packages deploy a payload dubbed ‘BlazeStealer’, to control the victim’s system and spy on them. ..
Getty Images reader comments 15 with Highly invasive malware targeting software developers is once again circulating in Trojanized code libraries, with the latest ones downloaded thousands of times in the last eight months, researchers said Wednesday. Since January, eight separate developer tools have contained hidden payloads with various nefarious capabilities, security firm Checkmarx reported. The ..
A new macOS malware probably used by North Korean hackers to target crypto exchanges has been found by security firm Jamf. The group behind the malware is thought to be the same group behind the recently reported KandyKorn malware. In its report on KandyKorn, Kaspersky describes the group as ‘Lazarus’, an overarching term for North ..
I ricercatori di Rapid7 hanno individuato nuove attività da parte del ransomware HelloKitty. Gli attacchi hanno sfruttato la vulnerabilità CVE-2023-46604 di Apache ActiveMQ per distribuire il malware e tentare di minacciare la vittima a pagare il riscatto. La vulnerabilità che colpisce il middleware consente a un attaccante di eseguire codice remoto manipolando il protocollo OpenWire. ..
As part of an ongoing and coordinated campaign, threat actors have been continuously publishing malicious NuGet packages with hidden code execution capabilities, threat detection firm ReversingLabs reports. The campaign has been ongoing since at least the beginning of August, with several hundred malicious packages published to the NuGet repository to date. The threat actor behind ..
