article thumbnail

Chinese Android phones shipped with malware-laced WhatsApp, Telegram apps

Security Affairs

Doctor Web warns that the attackers gained access to the supply chain of a number of Chinese manufacturers of Android-based smartphones. A third of the models listed below are manufactured under the SHOWJI brand.“ The kits analyzed by the company are commercialized by many manufacturers including Huawei, Lenovo and Xiaomi.

article thumbnail

Hive0117 group targets Russian firms with new variant of DarkWatchman malware

Security Affairs

The financially-motivated group targeted organizations in the media, tourism, finance, insurance, manufacturing, energy, telecommunications, biotechnology and retail sectors. The DarkWatchman malware can evade detection by standard antivirus software.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Enhanced capabilities sustain the rapid growth of Vo1d botnet

Security Affairs

In August 2024, several users reported that Dr.Web antivirus detected changes in their TV box system files. Unfortunately, manufacturers often sell older OS versions as newer ones. In September 2024, Doctor Web researchers uncovered a malware, tracked as Vo1d , that infected nearly 1.3

article thumbnail

Authorities released free decryptor for Phobos and 8base ransomware

Security Affairs

NoMoreRansom warns users to remove the malware first with a reliable antivirus before using the decryptor, or files may be re-encrypted repeatedly. The group has been active since March 2022, it focused on small and medium-sized businesses in multiple industries, including finance, manufacturing, business services, and IT.

article thumbnail

Protecting Oil and Gas Industry Infrastructure: Strategies for Resilience

SecureWorld News

Regularly updating and patching systems, including antivirus software, firewalls, and SCADA networks, can mitigate this risk. Strategies for protecting oil and gas infrastructure Regular updates and patching: Outdated software and hardware are the most common entry points for cyberattacks.

article thumbnail

China-linked APT group MirrorFace targets Japan

Security Affairs

Campaign B (2023): Exploited software vulnerabilities in networking devices, focusing on semiconductor, manufacturing, and aerospace sectors. Since June 2023, MirrorFace has used the Windows Sandbox feature to execute LOADEINFO malware within an isolated environment, evading antivirus detection. Track antivirus detections carefully.

article thumbnail

AI-Driven Fraud and Impersonation: The New Face of Financial Crime

SecureWorld News

Now, relatively unsophisticated criminals can download AI models and follow step-by-step tutorials to manufacture fake personas or instructions. For example, a deepfake phone call does not trigger any antivirus alert. In previous eras, only highly skilled hackers or nation-states might pull off such elaborate deception.