Accessibility links

Infected Telegram App Victims Know Purple Fox Is A Sly, Sneaky Malware

Your Security

Infected Telegram App Victims Know Purple Fox Is A Sly, Sneaky Malware

Since its discovery in 2018, Purple Fox trojan has been busy sharpening its malware claws. And now, this latest iteration of Purple Fox is proving difficult to stop…just ask those who’ve downloaded the Telegram app and ended up with an infected device. Malwarebytes notes they’ve previously seen Purple Fox combined with installers from WhatsApp and Windows as well. With an enormous distribution channel like Telegram and its ability to avoid detection, it’s no wonder this malware has a dangerous reputation. READ FULL STORY

Identity Theft

Info-Stealing Trojan Infects Over 9 Millions Gaming Apps And Android Devices
January 23, 2022

Over nine million users who downloaded gaming apps from Huawei’s AppGallery are finding their Android devices are infected with a variant of Cynos trojan known as “Android.Cynos.7.origin.” It’s an info-stealing malware that collects PII (personally identifiable information) from its victims. So far, 190 infected apps have been discovered in the AppGallery targeting Russian, Chinese, and international language users that may also include English language speakers. READ FULL STORY

Not All WiFi Is Good WiFi

Education

Not All WiFi Is Good WiFi

WiFi has become a part of pretty much any device that has network access. From mobile phones and tablets to desktop computers and laptops. The time to plug in an Ethernet cable has long since passed. And while just a few years ago it was considered high risk to allow WiFi access in corporate offices, now it is just a standard part of doing business. Unfortunately, when dealing with technology that everyone is using, cybercriminals are generally also going to get involved. And when it comes to WiFi, there are plenty of opportunities for cybercriminals to attack. Fortunately, most of this risk can be easily eliminated through awareness and proper security controls. READ FULL STORY
New Attack Method Makes Malware Injection A Breeze For APT Groups

Corporate Security

New Attack Method Makes Malware Injection A Breeze For APT Groups

Nation-state threat actors from Russia, China, and India are now using an easier way to launch malware phishing attacks against other nations, according to researchers at Proofpoint. The level of success and ease that these APT (advanced persistent threat) groups now have with an injection technique that infects PC’s is troubling. Proofpoint finds the involved nation-state’s RTF injection technique easily spreads malware and steals information from other governments. If there’s a new winner in the “Power Email Phishing Attack” category, this may be it. READ FULL STORY
Threat Actors Ramp Up Skimming Attacks On Online Shopping Sites

Your Security

Threat Actors Ramp Up Skimming Attacks On Online Shopping Sites

It seems as if we’ve entered a zone where online shopping is the only option for some things. Well, of course, that will increase the number of online shopping threats that we may run across while using our fingers and a keyboard to get the items we want or need. Unfortunately, threat actors are capitalizing on this fact. Recently, some websites have been detected that have skimming technology implemented in order to steal payment details for several online shopping sites. READ FULL STORY

Identity Theft

Millions Of Gravatar Fans Face Data Theft As Data Scraping Flaw Is Used Against Them
January 19, 2022

In 2020, a technique for scraping enormous amounts of data from Gravatar was published by a security researcher. And recently, researcher Troy Hunt, the cybersecurity do-gooder behind the Have I been pwned website, recently found some data “scraped” from Gravatar’s platform actually exposed the data of nearly 114 million of their customers. The vulnerability that led to the scraping was originally discovered in 2020. However, the types of information in the hands of bad actors may be more damaging than previously thought. READ FULL STORY

Warning Issued As Cyber Criminals Prey On Omicron Fears With More New Scams

Scams & Phishing

Warning Issued As Cyber Criminals Prey On Omicron Fears With More New Scams

Scammers are continuing to take advantage of fears surrounding the seemingly never-ending coronavirus pandemic by using the omicron COVID variant as a lure in recent phishing scams. This one isn’t just targeting higher education. The consumer group, Which? reported seeing one where rogue sites actually charge delivery fees to get a COVID home test to your door. Well, as we know, those home tests are few and far between and that is the first clue that it’s a scam. READ FULL STORY
State's Website Flaw Costs Millions And Leaks 100,000+ SSNs

Identity Theft

State's Website Flaw Costs Millions And Leaks 100,000+ SSNs

It all started when the “Show Me” state showed way too much on their Department of Elementary and Secondary Education (DESE) website. The Social Security numbers of over 100,000 DESE employees were exposed in the website’s public-facing source code. A reporter tried to help, but an unfortunate event followed. Data breaches are happening at break-neck speeds these days, tragically with many of them avoidable to begin with. IBM’s “Cost of a Data Breach 2021” finds the average data breach spiked to $4.24 million, up from last year’s $3.86 million. READ FULL STORY
Fake Browser Updates Source Of Ransomware And Banking Malware

Scams & Phishing

Fake Browser Updates Source Of Ransomware And Banking Malware

An all-out alarm reported by Surcuri finds bogus alerts circulating about the need to download the latest browser update. Although it’s always recommended to keep software up to date, this report finds hackers are exploiting that call to action in a big way. Using fake updates isn’t exactly a new hacking exploit, but hackers are getting better at it over time and this latest attack is a solid example of that. In this latest discovery, hackers use email links or script code to compromise a webpage. READ FULL STORY
Does Your State Rate? Top Five Worst States For Cybercrime In The U.S.

Your Security

Does Your State Rate? Top Five Worst States For Cybercrime In The U.S.

Last year was a wild ride for many reasons, least of all the continuing coronavirus pandemic. Hacking levels hit historic highs when scammers and hackers set their sights on new criminal opportunities created by the pandemic. Marketing company GetResponse took a closer look at hacking activity by individual state in their report “State of Online Hacking in America.” Their findings are based on the FBI’s “Internet Crime Report 2020,” which studied cybercrime in America during 2020. READ FULL STORY
TrickBot Malware Improves Again, Finds New Distribution Channels

Scams & Phishing

TrickBot Malware Improves Again, Finds New Distribution Channels

Since TrickBot opened its doors five years ago as a credential-stealing banking trojan, it’s made quite a name for itself. But what that name means depends on who’s being asked. Cybercriminals appreciate TrickBot for its stealth in effective email phishing campaigns, the ability to improve its nefarious abilities and for the profit it rakes in from attacks. Cybersecurity pros and everyday users, on the other hand, dislike TrickBot for those very same reasons, perhaps most of all for being the gateway for ransomware attacks. And now, it’s back again for added improvements and new distribution channels for its gang of thieves. READ FULL STORY
Attackers Using Omicron Variant To Phish University Credentials

Scams & Phishing

Attackers Using Omicron Variant To Phish University Credentials

For those involved in higher education in the U.S. – students, faculty and administrators, lookout for email phishing campaigns aiming for your login credentials. Attempts to steal this data from universities and colleges in this country are nothing new, but Proofpoint research shows these cybercrimes now have a renewed vigor thanks to the new Omicron variant. Based on the pandemic and the history of cybercrime surrounding it, researchers believe these credential-stealing, email phishing campaigns are destined to spread and quickly thrive. READ FULL STORY
Keeping Your Mobile Device Apps Virus Free

Mobile Security

Keeping Your Mobile Device Apps Virus Free

It’s no secret that cybercriminals take advantage of anxiety-filled times and the current coronavirus pandemic (COVID-19) is most certainly one of those moments. The latest cybersecurity news reports that Android smartphones are being targeted with apps claiming to have up-to-date data on COVID-19. These infected apps promise the latest updates, but to unsuspecting users who download them, they also promise malware will surely be installed on your mobile device. READ FULL STORY
Phishing Attacks Up-How To Avoid the Bait

Education

Phishing Attacks Up-How To Avoid the Bait

The Verizon 2019 Data Breach Investigations Report finds phishing shows no signs of slowing down. In 2018, phishing efforts increased by 40.9%, showing cyber scammers are sticking with what works and they’re getting better at it. Stealing valuable data and company funds are two goals bad actors look to exploit. Organizations are particularly vulnerable to phishing because of continuing efforts by cybercriminals to get access to their employees and systems. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.