Cybercrime & Digital Threats

Researchers discovered a vulnerability in Android devices that allows malware to hijack legitimate apps. Using this vulnerability, cybercriminals could trick users into granting permissions to their malicious apps and provide openings for phishing pages.

Instead of greetings and holiday cheer, malicious Thanksgiving Day eCards have been found spreading the evolving modular malware Emotet as well as other malware families.

For over a year, Microsoft has been monitoring a malware strain they named “Dexphot” that has been infecting Windows devices since October 2018. The malware used computer resources to mine cryptocurrency and profit from the attack.

Counterfeit apps were found carrying a new version of the Android banking trojan called Ginp to steal user login credentials and credit card details.

Amid the excitement for Black Friday, cybercriminals are rolling out schemes to trick consumers into sharing their card credentials and profiting from the shopping season.

Trickbot's password-grabbing module has been upgraded again, this time appearing to target OpenSSH and OpenVPN data.

A new botnet is being spread among Linux-based servers running the system configuration tool Webmin.

The official Monero site was found compromised after discovering a coin stealer malware in the CLI wallet that is available for download in the site. Evidence showed that the downloadable wallets were tampered with to contain the malware.

The AnteFrigus ransomware is delivered via a malvertising campaign to lure victims to the RIG exploit kit server, while the PureLocker ransomware, has been observed to launch targeted attacks against enterprise production servers.