Security Affairs

JUNE 22, 2025

CISA adds Apple products, and TP-Link routers flaws to its Known Exploited Vulnerabilities catalog Attackers target Zyxel RCE vulnerability CVE-2023-28771 India-based car-sharing company Zoomcar suffered a data breach impacting 8.4M

Data breaches 63

Data breaches DDOS Internet Internet 63

SecureList

FEBRUARY 5, 2025

The malware, which we dubbed “SparkCat”, used an unidentified protocol implemented in Rust, a language untypical of mobile apps, to communicate with the C2. This is the first known case of an app infected with OCR spyware being found in Apple’s official app marketplace.

Malware 142

Malware Encryption Mobile Cryptocurrency 142

Security Affairs

MARCH 16, 2025

CISA adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog GitLab addressed critical auth bypass flaws in CE and EE North Korea-linked APT group ScarCruft spotted using new Android spyware KoSpy Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilities Meta warns of actively exploited (..)

Spyware 73

Spyware Cybercrime Ransomware IoT 73

Security Boulevard

MARCH 24, 2025

Researchers name several countries as potential Paragon spyware customers TechCrunch The Citizen Lab, a group of academics and security researchers, recently published a report indicating the governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore are "likely" customers of Israeli spyware maker Paragon Solutions.

Surveillance 75

Surveillance Telecommunications Data breaches Spyware 75

SecureList

JUNE 5, 2025

Non-mobile statistics IT threat evolution in Q1 2025. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. Amos is designed to steal user passwords, cryptocurrency wallet data, browser cookies, and documents. IT threat evolution in Q1 2025.

Mobile 90

Mobile Adware Ransomware IoT 90

Security Affairs

JULY 16, 2020

Upon launching the malware on the mobile device, it will start by hiding its icon from the app drawer, then it asks the victim for the Accessibility Service privileges. . The list of targeted apps includes cryptocurrency wallet applications (i.e. . ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 129

Malware Banking Mobile Advertising 129

Security Affairs

MAY 17, 2022

Experts spotted over 200 Android apps on the Play Store distributing spyware called Facestealer used to steal sensitive data. Trend Micro researchers spotted over 200 Android apps on the Play Store distributing spyware called Facestealer used to steal sensitive data from infected devices.

Spyware 98

Spyware Cryptocurrency VPN Malware 98

SecureList

MAY 27, 2022

Non-mobile statistics. Mobile statistics. In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. IT threat evolution in Q1 2022. IT threat evolution in Q1 2022.

Phishing 132

Phishing Spyware Firmware Malware 132

SecureList

NOVEMBER 22, 2022

Cryptocurrency targeted attacks. The cryptocurrency business continues to grow, and people continue to invest their money in this market because it’s a digital asset and all transactions occur online. More cryptocurrency-related threats: fake hardware wallets, smart contract attacks, DeFi hacks, and more.

Cryptocurrency 106

Cryptocurrency Mobile Ransomware Banking 106

eSecurity Planet

JUNE 16, 2022

There are many types of cyberattacks , with top trends for 2022 including mobile attacks, ransomware, COVID-related scams and hacks, zero-click attacks , malicious QR codes , phishing , cryptojacking , and IoT malware attacks, among others. Restoration is offered in exchange for a ransom, usually in cryptocurrencies. Mobile attacks.

Backups 145

Backups Ransomware Firewall Malware 145

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 98

Spyware Hacking Malware Social Engineering 98

Security Affairs

NOVEMBER 10, 2020

Now the experts from Kaspersky’s Global Research and Analysis Team (GReAT) gathered further evidence that demonstrates that malware operators behind Tetrade, tracked as Guildma, have expanded their tactics to infect mobile devices with spyware. ” concludes the report. ” concludes the report.

Banking 109

Banking Mobile Malware Spyware 109

Security Affairs

MARCH 4, 2023

stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0 FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M

Spyware 98

Spyware Data breaches Ransomware Hacking 98

Security Affairs

SEPTEMBER 23, 2018

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms. NSO mobile Pegasus Spyware used in operations in 45 countries. Hackers stole $60 Million worth of cryptocurrencies from Japanese Zaif exchange. Amazon is investigating allegations that its staff is selling customer data.

Computers and Electronics 85

Computers and Electronics Cryptocurrency Spyware Data breaches 85

eSecurity Planet

FEBRUARY 17, 2025

It tries to provide features like anti-ransomware, anti-spyware, and parental controls, but that still keeps it behind. McAfee also doesnt offer spyware detection, but Defender does. It offers protection from viruses, ransomware, Trojans, and spyware, as well as scam protection from texts and phishing accounts.

Antivirus 67

Antivirus Identity Theft VPN Spyware 67

Security Affairs

JULY 13, 2019

Customers of 7-Eleven Japan lost $500,000 due to a flaw in the mobile app. New FinFisher spyware used to spy on iOS and Android users in 20 countries. Hackers stole $32 million from Bitpoint cryptocurrency exchange. Kindle Edition. Paper Copy. Once again thank you! Backdoor mechanism found in Ruby strong_password library.

Data breaches 78

Data breaches Spyware Advertising Government 78

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 98

Data breaches Malware Mobile Spyware 98

Webroot

MAY 12, 2021

Since cryptocurrencies were, are and will continue to be impactful technologies, surely NFTs are a topic worth exploring. NFTs use the same blockchain ledger technology to verify uniqueness that cryptocurrencies rely on to prove ownership. “What Bitcoin was to 2011, NFTs are to 2021.”. Perhaps NFTs are a bubble positioned to pop.

Cryptocurrency 111

Cryptocurrency Marketing Phishing Authentication 111

SecureWorld News

AUGUST 8, 2022

Cybercriminals often use malware to gain access to a computer or mobile device to deploy viruses, worms, Trojans, ransomware, spyware, and rootkits. It has been sold on underground hacker forums for stealing browser data, user credentials, and cryptocurrency information.

Malware 98

Malware Banking Penetration Testing Healthcare 98

Security Affairs

SEPTEMBER 2, 2018

· Personal details of 37,000 Eir customers exposed after the theft of a laptop. · USBHarpoon a look-like charging cable that can hack into your computer. · Android mobile devices from 11 vendors are exposed to AT Commands attacks. · Experts warn of possible attacks after PoC code for CVE-2018-11776 Struts flaw was published. · (..)

Spyware 60

Spyware Banking Data breaches Advertising 60

SecureList

SEPTEMBER 26, 2022

NullMixer is a dropper that includes more than just specific malware families; it drops a wide variety of malicious binaries to infect the machine with, such as backdoors, bankers, downloaders, spyware and many others. Screen with cryptocurrency addresses from Generic.ClipBanker binary. all-mobile-pa1ments.com[.]mx. ColdStealer.

Malware 144

Malware Cryptocurrency Passwords Software 144

Security Affairs

AUGUST 26, 2018

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 63

Spyware Banking DNS Advertising 63

SecureList

FEBRUARY 5, 2025

The malware, which we dubbed “SparkCat”, used an unidentified protocol implemented in Rust, a language untypical of mobile apps, to communicate with the C2. This is the first known case of an app infected with OCR spyware being found in Apple’s official app marketplace.

Malware 136

Malware Encryption Mobile Cryptocurrency 136

Security Affairs

MAY 8, 2020

This sharp upsurge in the number of blockages stems from the growing duration of phishing attacks: cybercriminals used to stop their fraudulent campaign as soon as their web pages were blocked, quickly mobilizing efforts for attacks on other brands. Today, they no longer dwell on it and continue replacing removed pages with new ones.

Phishing 87

Phishing Spyware Banking Malware 87

Security Affairs

AUGUST 25, 2019

App tainted with Ahmyst Open-source spyware appeared on Google Play Store twice. Employees abused systems at Ukrainian nuclear power plant to mine cryptocurrency. Thousands credit card numbers of MoviePass customers were exposed online. A new Zero-Day in Steam client impacts over 96 million Windows users. Texas attackers demand $2.5

Small Business 79

Small Business Data breaches Spyware Advertising 79

SecureList

NOVEMBER 18, 2022

Non-mobile statistics. Mobile statistics. VileRAT is a Python implant, part of an evasive and highly intricate attack campaign against foreign exchange and cryptocurrency trading companies. The top five mobile games used as a lure to target gamers were Minecraft, Roblox, Grand Theft Auto, PUBG and FIFA. Targeted attacks.

Malware 121

Malware Computers and Electronics Adware Cryptocurrency 121

SecureList

AUGUST 30, 2023

Non-mobile statistics IT threat evolution in Q2 2023. Mobile statistics Targeted attacks Gopuram backdoor deployed through 3CX supply-chain attack Earlier this year, a Trojanized version of the 3CXDesktopApp, a popular VoIP program, was used in a high-supply-chain attack. The threat actor specifically targeted cryptocurrency companies.

Malware 98

Malware Spyware Government Cryptocurrency 98

Security Boulevard

JANUARY 25, 2022

Exposing a Currently Active NSO Spyware Group’s Domain Portfolio – WhoisXML API Analysis. Introducing Astalavista.box.sk’s “Threat Crawler” Project – Earn Cryptocurrency for Catching the Bad Guys – Hardware Version Available. Introducing Dancho Danchevs’s “Blog” Android Mobile Application – Google Play Version Available.

Cybercrime 96

Cybercrime Hacking Scams Ransomware 96

SecureList

DECEMBER 1, 2023

However, they included an additional module that constantly monitored the messenger and sent data to the spyware creator’s C2 server. We examined the code in the apps and found that they were only slightly modified versions of the official Telegram app. Otherwise, the reverse shell is created by the crond backdoor itself.

Malware 137

Malware Ransomware Encryption Energy and Utilities 137

SecureList

NOVEMBER 14, 2023

This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. This attack was highly targeted and showed particular interest in cryptocurrency companies, which may indicate that the ultimate goal of the attackers was financial gain.

Hacking 140

Hacking Energy and Utilities Malware Media 140

eSecurity Planet

FEBRUARY 16, 2021

Malicious mobile app. Additional features of botnets include spam, ad and click fraud, and spyware. Cybersecurity vendors like Panda Security suggest the best way to defend against crimeware is using a combination of antivirus, anti-spyware, firewalls, and threat detection technology. ” Malicious Mobile Apps.

Malware 105

Malware Adware Spyware Antivirus 105

The Last Watchdog

FEBRUARY 28, 2021

From mining cryptocurrency to launching DDoS attacks against networks, there are countless ways in which malware can access and utilize victim’s computers and data. It is not unusual to have your system or network infected with malware, such as spyware, that often lingers secretly with no apparent symptoms. Warning signs. Common types.

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

CyberSecurity Insiders

JANUARY 31, 2021

From mining cryptocurrency to launching DDoS attacks against networks, there are countless ways in which malware can access and utilize victim’s computers and data. It is not unusual to have your system or network infected with malware, such as spyware, that often lingers secretly with no apparent symptoms. Don’t worry though.

Malware 107

Malware Computers and Electronics Adware Spyware 107

Webroot

MAY 12, 2021

With cryptocurrency values soaring again, executable based cryptojacking has been on the rise.” The price of Bitcoin and other cryptocurrencies have been booming over the last year, and the rise and fall of these prices affects cryptocrime levels. Mobile Threats. Types of threats we saw on pirated streaming sites. Bitcoin scams.

Scams 126

Scams Mobile Social Engineering Advertising 126

Security Affairs

APRIL 27, 2025

million patients Crooks exploit the death of Pope Francis WhatsApp introduces Advanced Chat Privacy to protect sensitive communications Android spyware hidden in mapping software targets Russian soldiers Crypto mining campaign targets Docker environments with new evasion technique The popular xrpl.js

Data breaches 64

Data breaches Spyware Malware Retail 64

Malwarebytes

APRIL 11, 2023

To avoid inadvertently infecting your mobile device while charging your phone in public, learn more about how these attacks could happen and what you can do to prevent them. Instead, hackers know that our mobile devices store a lot of PII, which can be sold on the dark web for profit or re-used in social engineering campaigns.

Mobile 98

Mobile Banking Malware Spyware 98

Security Affairs

NOVEMBER 5, 2023

Kinsing threat actors probed the Looney Tunables flaws in recent attacks ZDI discloses four zero-day flaws in Microsoft Exchange Okta customer support system breach impacted 134 customers Multiple WhatsApp mods spotted containing the CanesSpy Spyware Russian FSB arrested Russian hackers who supported Ukrainian cyber operations MuddyWater has been spotted (..)

Cyber Insurance 128

Cyber Insurance Cryptocurrency Data breaches Internet 128