Cybercrime & Digital Threats

Multiple government procurement services were targeted by a credential harvesting campaign that uses bogus pages to steal login credentials.

Researchers found hundreds of malicious Android apps to steal users' information, install adware, and access devices via excessive permissions.

Snatch ransomware is capable of forcing Windows machines to reboot into Safe Mode. Zeppelin ransomware, on the other hand, was responsible for infecting healthcare and IT organizations across Europe and the U.S.

We found new iterations of Trickbot with updates on its password-grabbing module, all targeting new apps and services.

Ryuk’s decryptor tool — provided by the threat actors behind the ransomware to victims who have paid ransom demands — could actually cause data loss instead of reinstating file access to users.

Maksim Yakubets, who allegedly runs Russia-based Evil Corp, the cybercriminal organization that developed and distributed banking malware Dridex, has been indicted in the United States by the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC).

Magecart has set its sights on a new set of targets: high-profile stores, including firearms vendor Smith & Wesson.

Researchers discovered a vulnerability in Android devices that allows malware to hijack legitimate apps. Using this vulnerability, cybercriminals could trick users into granting permissions to their malicious apps and provide openings for phishing pages.

Instead of greetings and holiday cheer, malicious Thanksgiving Day eCards have been found spreading the evolving modular malware Emotet as well as other malware families.