Krebs on Security

JANUARY 7, 2025

In the first step of the attack, they peppered the target’s Apple device with notifications from Apple by attempting to reset his password. The target told Michael that someone was trying to change his password, which Michael calmly explained they would investigate. “Password is changed,” the man said.

Phishing 352

Phishing Cryptocurrency Accountability Social Engineering 352

Zero Day

JUNE 30, 2025

PT ZDNET Those of you who use Microsoft Authenticator as a password manager will have to find another option, and soon. That's because an upcoming change will pull the plug on the ability to use the Authenticator app to store and autofill passwords. You have several options.

Authentication 111

Authentication Passwords Password Management Artificial Intelligence 111

Zero Day

JUNE 22, 2025

Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers. Close Home Tech Security 16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself Wondering if your information is posted online from a data breach?

Passwords 101

Passwords Data breaches Password Management Accountability 101

Krebs on Security

FEBRUARY 4, 2025

The FBI joined authorities across Europe last week in seizing domain names for Cracked and Nulled , English-language cybercrime forums with millions of users that trafficked in stolen data, hacking tools and malware. io , and rdp[.]sh. Those archived webpages show both RDP services were owned by an entity called 1337 Services Gmbh.

eCommerce 244

eCommerce Cybercrime Accountability Hacking 244

Zero Day

JUNE 26, 2025

Here's why A new Trojan malware is targeting sensitive information, including crypto wallet seed phrases. Also: How Avast's free AI-powered Scam Guardian protects you from online con artists According to Kaspersky, the malware targets iOS and Android devices. Here's how the malware works.  What is SparkKitty?

Password Management 124

Password Management Small Business Passwords Artificial Intelligence 124

Penetration Testing

JULY 9, 2025

Its distribution now spans: Fake or cracked software downloads Spear phishing job scams, targeting high-value crypto holders and freelancers Once inside, victims are socially engineered to enter system passwords under the guise of enabling screen sharing or installing job-related software. Moonlock Lab suggests this is just the beginning.

Malware 77

Malware Surveillance InfoSec Penetration Testing 77

Security Affairs

FEBRUARY 2, 2025

The Saim Raza group run multiple marketplaces that advertised and facilitated the sale of hacking and fraud tools, including malware, phishing kits and email extractors. The HeartSender group advertised its tools as fully undetectable by antispam software. These tools are essential components to build and run fraud operations.

Cybercrime 111

Cybercrime Advertising Phishing Hacking 111

SecureList

NOVEMBER 6, 2024

It also uses stealer malware to extract the victim’s credit card data as well as details about the infected device. Technical Details Background In August 2024, we stumbled upon a massive infection caused by an unknown bundle consisting of miner and stealer malware. SteelFox.gen , Trojan.Win64.SteelFox.*. SteelFox.*.

Software 118

Software Cryptocurrency Malware DNS 118

SecureList

OCTOBER 29, 2024

Attackers are increasingly distributing malware through a rather unusual method: a fake CAPTCHA as the initial infection vector. As with the previous stage, the victim doesn’t always encounter malware. They purchase advertising slots that redirect users to malicious resources, employing various tricks to achieve infections.

Adware 121

Adware Malware Cryptocurrency Data collection 121

Zero Day

JULY 10, 2025

PT Reviewed by David Grober Photoraidz/Getty Images Previously on our passkey journey, I talked about the challenge of figuring out if a relying party -- typically, the operator of a website or app -- even offers the ability to sign in with a passkey instead of the more traditional and less secure username and password-based approach. 

Password Management 122

Password Management Authentication Passwords Artificial Intelligence 122

Zero Day

JUNE 6, 2025

Also: Massive data breach exposes 184 million passwords for Google, Microsoft, Facebook, and more Individually, any one of those pieces of data can be exploited by the wrong people. The hackers say that the dates of birth and social security numbers were originally encrypted but have since been decrypted and are now visible in plain text.

Password Management 128

Password Management Passwords Identity Theft Artificial Intelligence 128

SecureList

NOVEMBER 29, 2024

Kaspersky solutions worldwide detected this type of malware on 297,485 unique user devices. Attacks on macOS Password stealers were the third quarter’s most noteworthy findings associated with attacks on macOS users. This malware also possessed the capability to install a backdoor on compromised systems. 2 Tajikistan 1.63

Mobile 104

Mobile Adware Ransomware Malware 104

Zero Day

JUNE 20, 2025

Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers. Close Home Tech Security Heard about the 16 billion passwords leak? This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay.

Passwords 106

Passwords Data breaches Password Management Identity Theft 106

Penetration Testing

JUNE 20, 2025

the vulnerability enables unauthenticated attackers to reset any user’s password, including administrators, resulting in full site takeover. The flaw lies in how the Motors theme handles the “Login Register” widget, which includes a password reset function. user_id=1&hash_check=%25C0 POST /reset-password?user_id=1&hash_check=%C0

Accountability 73

Accountability Passwords Penetration Testing Firewall 73

SecureList

MARCH 11, 2025

Since the beginning of the year, we’ve been tracking in our telemetry a new wave of DCRat distribution, with paid access to the backdoor provided under the Malware-as-a-Service (MaaS) model. The cybercriminal group behind it also offers support for the malware and infrastructure setup for hosting the C2 servers.

Passwords 83

Passwords Malware Advertising Software 83

Malwarebytes

FEBRUARY 19, 2025

The latest, major threats to Mac computers can steal passwords and credit card details with delicate precision, targeting victims across the internet based on their device, location, and operating system. These findings come from the 2025 State of Malware report. But in the world of cybercrime, malware features only mean so much.

Malware 133

Malware Software Passwords Cryptocurrency 133

SecureWorld News

FEBRUARY 14, 2025

And 2025 will be no different, as increasingly sophisticated online hackers seek to take advantage of Valentine's themed email traffic, social media advertisements, or marketing campaigns, and exploit heightened emotions and a desire to connect. Using strong, unique passwords for dating apps and online stores is also a good idea."

Scams 84

Scams Cybercrime Phishing Social Engineering 84

SecureList

DECEMBER 16, 2024

Review of last year’s predictions The number of services providing AV evasion for malware (cryptors) will increase We continuously monitor underground markets for the emergence of new “cryptors,” which are tools specifically designed to obfuscate the code within malware samples.

Marketing 103

Marketing Cryptocurrency Data breaches Malware 103

Zero Day

JUNE 19, 2025

PT NurPhoto / Contributor/Getty For all of us who hate passwords, passkeys represent a simpler and safer way of authenticating online accounts. PT NurPhoto / Contributor/Getty For all of us who hate passwords, passkeys represent a simpler and safer way of authenticating online accounts.

Passwords 75

Passwords Password Management Small Business Mobile 75

Zero Day

JUNE 17, 2025

Those codes are supposed to serve as two-factor authentication to confirm our identity and prevent scammers from accessing our accounts through a password alone. Also: Got a new password manager? PT kontekbrothers/Getty We've probably all received confirmation codes sent via text message when trying to sign into an account.

Authentication 108

Authentication Password Management Small Business Passwords 108

Zero Day

JULY 3, 2025

First noticed by Rapid7 in May and publicly disclosed on June 25 , this unpatchable vulnerability lets an attacker who knows -- or can find out -- your printer's serial number generate its default administrator password. But the "good" news is you can still protect yourself by changing that default password today.

Password Management 95

Password Management Passwords Firmware Artificial Intelligence 95

Malwarebytes

APRIL 3, 2025

Combined with other known phishing techniques, QR codes provide criminals with a potent tool for collecting usernames and passwords, distributing malware, and other malicious activities. Personal email addresses would see generic advertising, but corporate email addresses would be prompted to log in with their Microsoft account.

Phishing 142

Phishing Banking Mobile Accountability 142

Digital Shadows

FEBRUARY 17, 2025

Infrastructure Built for Dominance: Unconventional Data-Leak Site and Bespoke Malware Custom-Built Malware Competitor ransomware groups like Bl00dy, Dragonforce, and RA World rely on leaked Babuk or LockBit builders to launch attacks. We identified these users through posts requesting off-platform contact (e.g.,

Ransomware 83

Ransomware Malware Risk Accountability 83

Zero Day

JULY 9, 2025

PT Reviewed by David Grober Adam Smigielski/Getty Images Over the last few decades, compromised usernames and passwords have typically been at the root of some of the most sensational, damaging, and costly data breaches. And how exactly does this sorcery work? We go behind the scenes of this still-evolving authentication process.

Passwords 84

Passwords Password Management Authentication Artificial Intelligence 84

Zero Day

JUNE 27, 2025

Also: Were 16 billion passwords from Apple, Google, and Facebook leaked? Featured Were 16 billion passwords from Apple, Google, and Facebook leaked? How to protect yourself Distributed network: Spreading out your network infrastructure helps avoid single points of failure and bottlenecks that DDoS attacks can exploit.

DDOS 97

DDOS Small Business Password Management Passwords 97

Malwarebytes

MARCH 17, 2025

While Google searches are probably one of the most common tasks for any vacation planning, the results that people see can be manipulated through a type of cybercrime called malvertising , short for “malicious advertising. Use a password manager and 2FA. Your most sensitive accounts shouldnt just have a unique password.

Scams 102

Scams Passwords VPN Backups 102

SecureList

MARCH 19, 2025

What’s intriguing about this malware is how much it collects. The malicious actor behind Arcane went on to release a similarly named loader, which supposedly downloads cheats and cracks, but in reality delivers malware to the victim’s device.

Passwords 73

Passwords Media Malware VPN 73

Malwarebytes

MARCH 20, 2025

This blog post was co-authored with Elie Berreby, Senior SEO Strategist Criminals are highly interested in online marketing and advertising tools that they can leverage as part of their ongoing malware campaigns.

Scams 68

Scams Accountability Phishing Advertising 68

SecureList

JUNE 25, 2025

At the same time, AI-driven attacks are becoming increasingly common, making phishing and malware campaigns easier to prepare and quickly adapt, thus increasing their scale. Another cybercriminal tactic to watch for in 2025 is the growing use of collaboration platform brands to trick users into downloading or launching malware and PUAs.

Adware 84

Adware Phishing Computers and Electronics Banking 84

Graham Cluley

JUNE 12, 2025

Skip to content Graham Cluley Cybersecurity and AI keynote speaker BOOK ME Speaking · Writing · Podcasts · Video · Contact · About · Games 🔍 ⁠This weeks sponsor: Proton Pass - Easily create unique, secure passwords. How are the bad guys spreading the malware? Integrated 2FA.

Malware 62

Malware Cryptocurrency Accountability Advertising 62

Zero Day

JUNE 26, 2025

Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers. Privacy Policy | | Cookie Settings | Advertise | Terms of Use This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. All rights reserved.

Password Management 116

Password Management Small Business Software DNS 116

Penetration Testing

JUNE 15, 2025

Skip to content June 16, 2025 Linkedin Twitter Facebook Youtube Daily CyberSecurity Primary Menu Home Cyber Criminals Cyber Security Data Leak Linux Malware Vulnerability Submit Press Release Vulnerability Report Windows Search for: Home News Vulnerability Report Critical Blink Router Flaws (CVSS 9.8)

Firmware 67

Firmware DNS Penetration Testing Malware 67

Zero Day

JUNE 6, 2025

Privacy Policy | | Cookie Settings | Advertise | Terms of Use Topics Galleries Videos Do Not Sell or Share My Personal Information about ZDNET Meet The Team Sitemap Reprint Policy Join | Log In Newsletters Licensing Accessibility © 2025 ZDNET, A Ziff Davis company. All rights reserved.

Artificial Intelligence 95

Artificial Intelligence Password Management Small Business Passwords 95

SecureList

APRIL 21, 2025

Introduction The evolution of Malware-as-a-Service (MaaS) has significantly lowered the barriers to entry for cybercriminals, with information stealers becoming one of the most commercially successful categories in this underground economy. txt The script performs the following actions: Downloads the malware. Extracts the malware.

Malware 77

Malware Cryptocurrency Software Antivirus 77

Penetration Testing

JUNE 17, 2025

Search Our Websites Penetration Testing Tools The Daily Information Technology Daily CyberSecurity About SecurityOnline.info Advertise with us Announcement Contact Contributor Register Login About SecurityOnline.info Advertise on SecurityOnline.info Contact When you purchase through links on our site, we may earn an affiliate commission.

Firmware 62

Firmware Penetration Testing Manufacturing Surveillance 62

SecureList

OCTOBER 23, 2024

We closely monitor their activities and quite often see them using their signature malware in their attacks — a full-feature backdoor called Manuscrypt. We tried to log in using some common account names and passwords, and then tried to register our own account through the game and the website — but nothing worked.

Engineering 145

Engineering Accountability Social Engineering Cryptocurrency 145

Malwarebytes

MAY 8, 2025

Beside stealing usernames, passwords and circumventing two factor authentication, we identified malicious code capable of performing additional nefarious actions unbeknownst to the victim. In that same report, the FBI advises consumers to check the URL to make sure the site is authentic before clicking on an advertisement.

Phishing 106

Phishing Authentication Engineering Banking 106