The Hacker News

SEPTEMBER 27, 2023

A new malware strain called ZenRAT has emerged in the wild that's distributed via bogus installation packages of the Bitwarden password manager. The malware is specifically targeting Windows users and will redirect people using other hosts to a benign web page," enterprise security firm Proofpoint said in a technical report.

Password Management 131

Password Management Passwords Malware Software 131

Bleeping Computer

APRIL 28, 2023

A new version of the ViperSoftX information-stealing malware has been discovered with a broader range of targets, including targeting the KeePass and 1Password password managers. [.]

Password Management 124

Password Management Passwords Malware 124

Tech Republic Security

SEPTEMBER 29, 2023

We talked to Proofpoint researchers about this new malware threat and how it infects Windows systems to steal information.

Password Management 200

Password Management Malware Passwords Cybersecurity 200

Heimadal Security

OCTOBER 10, 2022

This will result in the installation of password-stealing malware and the theft of cryptocurrency wallets. The post Solana Phantom Targeted by Password-Stealing Malware appeared first on Heimdal Security Blog.

Passwords 110

Passwords Malware Cryptocurrency Cybersecurity 110

Heimadal Security

FEBRUARY 7, 2023

A new strain of mobile malware targeting Brazil and other LATAM nations has just been discovered. The malware is designed to steal sensitive data and […] The post PixPirate Malware Is Actively Stealing Banking Passwords appeared first on Heimdal Security Blog.

Banking 105

Banking Passwords Malware Mobile 105

The Hacker News

JANUARY 3, 2024

Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset.

Passwords 102

Passwords Malware 102

CyberSecurity Insiders

DECEMBER 30, 2021

If you follow a custom of saving passwords in your browser, you better change it, before it’s too late. Because security researchers from a South Korean cybersecurity firm, AhnLab discovered that a new malware named Redline was seen lurking in the browsers and stealing saved passwords only to be transmitted to remote servers.

Passwords 118

Passwords Malware Cryptocurrency Software 118

Heimadal Security

JANUARY 20, 2022

Researchers have recently discovered a new malware they named BHUNT. This targets passwords, security phrases, and cryptocurrency wallet contents. BHUNT Crypto Stealer: More Details The Bitdefender researchers were the ones who identified this new malware dubbed BHUNT and analyzed it in a report recently published.

Passwords 119

Passwords Malware Cryptocurrency Cybersecurity 119

Heimadal Security

MARCH 28, 2023

It is delivered on the dark web as a malware-as-a-service (MaaS), at a fairly low cost – $100 only. At […] The post MacStealer MacOS Malware Steals Passwords from iCloud Keychain appeared first on Heimdal Security Blog.

Passwords 96

Passwords Malware Cybersecurity 96

Bleeping Computer

DECEMBER 28, 2021

The RedLine information-stealing malware targets popular web browsers such as Chrome, Edge, and Opera, demonstrating why storing your passwords in browsers is a bad idea. [.].

Passwords 145

Passwords Malware 145

Tech Republic Security

JUNE 4, 2020

Malicious files masquerading as curriculum vitae are being sent to businesses to install malware that can capture passwords and other sensitive information, says Check Point Research.

Passwords 180

Passwords Malware 180

Krebs on Security

FEBRUARY 28, 2024

But clicking the meeting link provided by the scammers prompts the user to run a script that quietly installs malware on macOS systems. It didn’t dawn on Doug until days later that the missed meeting with Mr. Lee might have been a malware attack. MacOS computers include X-Protect , Apple’s built-in antivirus technology.

Malware 269

Malware Cryptocurrency Software Scams 269

Bleeping Computer

DECEMBER 5, 2021

Cybercriminals are spamming website contact forms and discussion forums to distribute Excel XLL files that download and install the RedLine password and information-stealing malware. [.].

Passwords 143

Passwords Malware 143

Penetration Testing

MAY 7, 2024

Security researchers at FortiGuard Labs have uncovered a dangerous new trend: hackers are weaponizing Minecraft source packs to distribute a notorious password-stealing malware called zEus.

Passwords 62

Passwords Penetration Testing Malware Risk 62

Troy Hunt

FEBRUARY 24, 2022

There's a time and a place for going fast, and there's no better place to do that than when querying Have I Been Pwned's Pwned Passwords service. (Ok, In December last year, Pwned Passwords saw not just a fresh batch of 225M new passwords from the NCA , but it also welcomed the ongoing ingestion of new passwords from the FBI.

Passwords 295

Passwords Malware 295

Bleeping Computer

OCTOBER 21, 2021

Widespread malware campaigns are creating YouTube videos to distribute password-stealing trojans to unsuspecting viewers. [.].

Passwords 145

Passwords Malware 145

Heimadal Security

OCTOBER 25, 2022

Taking advantage of password-protected archive files, the notorious trojan drops CoinMiner and Quasar RAT on the systems it takes over. The post Emotet Botnet Drops Malware via Self-Unlocking Password-Protected RAR Files appeared first on Heimdal Security Blog.

Passwords 118

Passwords Malware Cybersecurity 118

Heimadal Security

MARCH 22, 2022

Android Password Stealing Malware Poses as Cartoonifier App The discovered malware poses as “Craftsart Cartoon Photo Tool” which is a cartoonifier software that permits users to upload […]. The post 100,000 Google Play Users Targeted by Android Password Stealing Malware appeared first on Heimdal Security Blog.

Passwords 105

Passwords Malware Software Cybersecurity 105

Bleeping Computer

APRIL 5, 2024

Hackers are using Facebook advertisements and hijacked pages to promote fake Artificial Intelligence services, such as MidJourney, OpenAI's SORA and ChatGPT-5, and DALL-E, to infect unsuspecting users with password-stealing malware. [.]

Artificial Intelligence 136

Artificial Intelligence Malware Advertising Passwords 136

Heimadal Security

JULY 22, 2021

Researchers from ReversingLabs have released a report detailing a threat referred to as NPM malware they found in NPM packages that targets credentials by means of the Google Chrome Recovery Tool. How Does the NPM Malware Operate? The NPM Malware file name is Win32.Infostealer.Heuristics,

Passwords 116

Passwords Malware Cybersecurity 116

Malwarebytes

NOVEMBER 2, 2023

At Malwarebytes we’ve been telling people for years not to reuse passwords, and that a password manager is a secure way of remembering all the passwords you need for your online accounts. But we also know that a password manager can be overwhelming, especially when you’re just getting started. Encryption.

Passwords 136

Passwords Password Management Data breaches Authentication 136

Bleeping Computer

DECEMBER 28, 2023

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. [.]

Malware 108

Malware Passwords 108

Heimadal Security

OCTOBER 22, 2021

A Trojan is a type of malware that acts according to the Greek legend, as it camouflages itself as a legitimate file or program to trick unsuspecting users into installing it on their PCs. The post YouTube Used to Push Password-Stealing Malware appeared first on Heimdal Security Blog.

Passwords 98

Passwords Malware Cyber Attacks Phishing 98

eSecurity Planet

NOVEMBER 29, 2022

Group-IB cybersecurity researchers recently identified several Russian-speaking cybercrime groups offering infostealing malware-as-a-service (MaaS), resulting in the theft of more than 50 million passwords thus far. Eight of the groups use Raccoon malware, 23 use Redline, and three use custom stealers. Aurora Malware.

Passwords 127

Passwords Cybercrime Malware Marketing 127

Bleeping Computer

MARCH 27, 2023

A new info-stealing malware named MacStealer is targeting Mac users, stealing their credentials stored in the iCloud KeyChain and web browsers, cryptocurrency wallets, and potentially sensitive files. [.]

Malware 138

Malware Passwords Cryptocurrency 138

Bleeping Computer

DECEMBER 28, 2023

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. [.]

Malware 93

Malware Passwords 93

Bleeping Computer

MAY 5, 2023

A new Android malware called 'FluHorse' has been discovered, targeting users in Eastern Asia with malicious apps that imitate legitimate versions. [.]

Malware 137

Malware Passwords Mobile 137

Bleeping Computer

JULY 15, 2022

A threat actor is infecting industrial control systems (ICS) to create a botnet through password "cracking" software for programmable logic controllers (PLCs). [.].

Passwords 145

Passwords Malware Software 145

Krebs on Security

MAY 7, 2022

Apple , Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. “I worry about forgotten password recovery for cloud accounts.” Image: Blog.google.

Passwords 240

Passwords Authentication Accountability Mobile 240

The Hacker News

JANUARY 19, 2022

A new evasive crypto wallet stealer named BHUNT has been spotted in the wild with the goal of financial gain, adding to a list of digital currency stealing malware such as CryptBot, Redline Stealer, and WeSteal.

Passwords 102

Passwords Cryptocurrency Malware 102

Heimadal Security

DECEMBER 6, 2021

Malicious hackers are distributing Excel XLL files that download and install the RedLine password and information-stealing malware via website contact forms and discussion forums. The post Excel XLL Add-ins Are Pushing a Password-stealing Malware appeared first on Heimdal Security Blog. What Are XLL Files?

Passwords 98

Passwords Malware Cybersecurity 98

CSO Magazine

OCTOBER 20, 2022

Distributing malware inside password-protected archives has long been one of the main techniques used by attackers to bypass email security filters. More recently, researchers have spotted a variation that uses nested self-extracting archives that no longer require victims to input the password.

Passwords 96

Passwords Malware 96

Bleeping Computer

JANUARY 19, 2022

A novel modular crypto-wallet stealing malware dubbed 'BHUNT' has been spotted targeting cryptocurrency wallet contents, passwords, and security phrases. [.].

Passwords 99

Passwords Malware Cryptocurrency 99

Malwarebytes

FEBRUARY 27, 2024

These are “Android banking trojans,” and, according to our 2024 ThreatDown State of Malware report , Malwarebytes detected an astonishing 88,500 of them last year alone. But Google Play’s security measures frequently detect malware and prevent it from being listed. So, what’s a cybercriminal to do? What does it all mean for me?

Banking 143

Banking Passwords Accountability Malware 143

Heimadal Security

DECEMBER 29, 2021

An information-stealing malware dubbed RedLine is targeting browsers like Chrome, Opera, or Microsoft Edge. RedLine Malware Steals Your Password from the Browser appeared first on Heimdal Security Blog. The post Watch Out!

Passwords 97

Passwords Malware Accountability Cybersecurity 97

Bleeping Computer

DECEMBER 29, 2023

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset. [.]

Accountability 143

Accountability Malware Authentication Passwords 143

Heimadal Security

APRIL 28, 2021

Known as FluBot, this malware can be installed via text messages that are claiming to come from a delivery company and are asking the users to click a link to track package delivery. This link asks users to install an application to follow the fake delivery, but the installed app actually is a malware designed to steal information […].

Passwords 90

Passwords Malware Cybersecurity 90