article thumbnail

2FA bypass in cPanel potentially exposes tens of millions of websites to hack

Security Affairs

Researchers discovered a major issue in cPanel that could be exploited by attackers to bypass two-factor authentication for cPanel accounts. Security researchers from Digital Defense have discovered a major security issue in cPanel , a popular software suite that facilitates the management of a web hosting server.

Hacking 136
article thumbnail

Cookiethief, the Android malware that hijacks Facebook accounts

Security Affairs

Experts discovered an Android Trojan, dubbed Cookiethief , that is able to gain root access on infected devices and hijack Facebook accounts. “We recently discovered a new strain of Android malware. “Malware could steal cookie files of any website from other apps in the same way and achieve similar results.”

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Gmail blocked 18 Million phishing and malware emails using COVID-19 lures in a week

Security Affairs

Google says that the Gmail malware scanners have blocked around 18 million phishing and malware emails using COVID-19 lures in just one week. Google announced that its anti-malware solutions implemented to defend its Gmail users have blocked around 18 million phishing and malware emails using COVID-19 lures within the last seven days.

Phishing 116
article thumbnail

September Snafus: Hackers Take Advantage of Unwitting Employees

Approachable Cyber Threats

Several large companies were hacked in the first half of September. In the IHG hack, a couple from Vietnam claimed they were attempting to deploy ransomware on the network. Unfortunately for IHG, their IT Department was so good at preventing this ransomware attack that the couple became vindictive, deploying wiper malware instead.

article thumbnail

Analyzing attacks conducted by North Korea-linked ARCHIPELAGO APT group

Security Affairs

. “When recipients replied expressing interest in an interview, ARCHIPELAGO continued the correspondence over several emails before finally sending a OneDrive link to a password-protected file that contained malware.” ” The threat actor has also sent links that lead to “ browser-in-the-browser ” phishing pages.

article thumbnail

Google warns of APT28 attack attempts against 14,000 Gmail users

Security Affairs

The researchers pointed out that the warning is related to hacking attempts and that not all the attacks have been successful, also thanks to the defense implemented by Google. The warning really mostly tells people you are a potential target for the next attack so, now may be a good time to take some security actions.

article thumbnail

Roblox breached: Internal documents posted online by unknown attackers

Malwarebytes

Hacks and compromise: from myth to reality. The Roblox player base is young, and naturally enough worried about risks from cheats and account compromise. As a result, Roblox spends a fair amount of time debunking hacking myths. If the victim refuses to pay the ransom, the malware authors threaten to leak files.