î ‚May 12, 2025î „Ravie LakshmananMalware / Artificial Intelligence Threat actors have been observed leveraging fake artificial intelligence (AI)-powered tools as a lure to entice users into downloading an information stealer malware dubbed Noodlophile. “Instead of relying on traditional phishing or cracked …
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures Read More »
î ‚May 10, 2025î „Ravie LakshmananCryptocurrency / Cybercrime Germany’s Federal Criminal Police Office (aka Bundeskriminalamt or BKA) has seized the online infrastructure and shutdown linked to the eXch cryptocurrency exchange over allegations of money laundering and operating a criminal trading platform. The …
Germany Shuts Down eXch Over $1.9B Laundering, Seizes €34M in Crypto and 8TB of Data Read More »
î ‚May 10, 2025î „Ravie LakshmananBiometric Data / Privacy Google has agreed to pay the U.S. state of Texas nearly $1.4 billion to settle two lawsuits that accused the company of tracking users\’ personal location and maintaining their facial recognition data without …
î ‚May 09, 2025î „Ravie LakshmananArtificial Intelligence / Online Fraud Google recently announced the deployment of new artificial intelligence (AI) technology to combat online scams on Chrome, Search, and Android platforms. The company revealed that it will leverage Gemini Nano, an on-device …
Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android Read More »
The threat actor known as COLDRIVER , linked to Russia, has been found distributing a new malware named LOSTKEYS as part of an espionage-focused operation using ClickFix-style social engineering tactics. The Google Threat Intelligence Group (GTIG) stated that “LOSTKEYS is …
Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware Read More »
î ‚May 07, 2025î „Ravie LakshmananSoftware Supply Chain / Malware Cybersecurity researchers have uncovered a malicious package on the Python Package Index (PyPI) repository that poses as a harmless Discord-related utility but actually contains a remote access trojan. The package, known as …
Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times Read More »
î ‚May 06, 2025î „Ravie LakshmananVulnerability / Mobile Security Google has released its monthly security updates for Android with fixes for 46 security flaws, including one vulnerability that it said has been exploited in the wild. The vulnerability in question is CVE-2025-27363 …
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers Read More »
243 ASUS has recently addressed a vulnerability in routers that were equipped with AiCloud, which could potentially allow unauthorized commands to be executed on the device. It is essential for users to update their routers with the latest firmware release …
ASUS Fixed Critical Auth Bypass Vulnerability In AiCloud Routers Read More »
î ‚May 03, 2025î „Ravie LakshmananSupply Chain Attack / Malware Cybersecurity researchers have unearthed three malicious Go modules containing encrypted code to access subsequent destructive payloads that can permanently corrupt a Linux system’s main drive and make it unbootable. The names of …
Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack Read More »
184 A new attack strategy called “Cookie-Bite” has been devised by researchers, showcasing cookie theft through malicious browser extensions. While the concept of stealing session cookies is not new, using a malicious browser extension as a proof of concept emphasizes …
Cookie-Bite Attack Demoes Extension Exploit To Steal Cookies Read More »
