Lightnews — Scholar-powered news

Android adware apps on Google Play amass two million installs

Several malicious Google Play Android apps installed over 2 million times push intrusive ads to users while concealing their presence on the infected devices.

October 26, 2023 at 10:35 PM

Shogo K.

@syoon.bsky.social

VMware fixes critical code execution flaw in vCenter Server

VMware issued security updates to fix a critical vCenter Server vulnerability that can be exploited to gain remote code execution attacks on vulnerable servers.

October 26, 2023 at 10:34 PM

Shogo K.

@syoon.bsky.social

Fake Corsair job offers on LinkedIn push DarkGate malware

A threat actor is using fake LinkedIn posts and direct messages about a Facebook Ads specialist position at hardware maker Corsair to lure people into downloading info-stealing malware like DarkGate ...

October 22, 2023 at 2:12 AM

Shogo K.

@syoon.bsky.social

Critical RCE flaws found in SolarWinds access audit solution

Security researchers found three critical remote code execution vulnerabilities in the SolarWinds Access Rights Manager (ARM) product that remote attackers could use to run code with SYSTEM privilege...

October 21, 2023 at 12:28 AM

Shogo K.

@syoon.bsky.social

Single Sign On and the Cybercrime Ecosystem

One of the trends driving an increase is the compromise of enterprise single sign on (SSO) applications are info-stealer malware attacks. Learn more from Flare about this cybercrime ecosystem.

www.bleepingcomputer.com/news/microso...

October 19, 2023 at 4:13 PM

Shogo K.

@syoon.bsky.social

October 18, 2023 at 12:55 PM

Shogo K.

@syoon.bsky.social

SpyNote Android malware spreads via fake volcano eruption alerts

Android malware 'SpyNote' was seen in an Italy-focused campaign that uses a phony 'IT-alert' public alert service website to infect visitors.

krebsonsecurity.com/2023/10/phis...

October 18, 2023 at 12:49 PM

Shogo K.

@syoon.bsky.social

Phishers Spoof USPS, 12 Other Natl’ Postal Services

Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Postal Service (USPS) customers. Here's a look at an extensive SMS phishing operation that tries to steal persona...

krebsonsecurity.com

October 9, 2023 at 10:55 PM

Shogo K.

@syoon.bsky.social

NSA and CISA reveal top 10 cybersecurity misconfigurations

The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) revealed today the top ten most common cybersecurity misconfigurations discovered by their red and bl...

October 5, 2023 at 11:54 PM

Shogo K.

@syoon.bsky.social

FBI warns of surge in 'phantom hacker' scams impacting elderly

The FBI issued a public service announcement warning of a significant increase in 'phantom hacker' scams targeting senior citizens across the United States.

October 2, 2023 at 5:02 PM

Shogo K.

@syoon.bsky.social

The Week in Ransomware - September 29th 2023 - Dark Angels

This week has been a busy ransomware week, with ransomware attacks having a massive impact on organizations and the fallout of the MOVEit breaches to be disclosed.

September 30, 2023 at 12:50 PM

Shogo K.

@syoon.bsky.social

Bing Chat responses infiltrated by ads pushing malware

Malicious advertisements are now being injected into Microsoft's AI-powered Bing Chat responses, promoting fake download sites that distribute malware.

September 29, 2023 at 12:13 PM

Shogo K.

@syoon.bsky.social

Building automation giant Johnson Controls hit by ransomware attack

Johnson Controls International has suffered what is described as a massive ransomware attack that encrypted many of the company devices, including VMware ESXi servers, impacting the company's and its ...

September 27, 2023 at 11:19 PM

Shogo K.

@syoon.bsky.social

New ZeroFont phishing tricks Outlook into showing fake AV-scans

Hackers are utilizing a new trick of using zero-point fonts in emails to make malicious emails appear as safely scanned by security tools in Microsoft Outlook.

www.darkreading.com/remote-workf...

September 27, 2023 at 12:56 AM

Shogo K.

@syoon.bsky.social

Xenomorph Android Malware Targets Customers of 30 US Banks

The Trojan had mainly been infecting banks in Europe since it first surfaced more than one year ago.

www.darkreading.com/microsoft/cy...

September 26, 2023 at 11:17 PM

Shogo K.

@syoon.bsky.social

Cyber Hygiene: A First Line of Defense Against Evolving Cyberattacks

Back to basics is a good start, but too often security teams don't handle their deployment correctly. Here's how to avoid the common pitfalls.

www.darkreading.com/endpoint/phi...

September 25, 2023 at 11:22 PM

Shogo K.

@syoon.bsky.social

Attackers Abuse Google Looker Studio to Evade DMARC, Email Security

Cyberattackers are tapping the legitimacy of the Web-based data-visualization tool in a campaign aimed at stealing credentials and defrauding hundreds of business users.

www.darkreading.com/threat-intel...

September 22, 2023 at 12:12 AM

Shogo K.

@syoon.bsky.social

LockBit Is Using RMMs to Spread Its Ransomware

The LockBit group is using native IT management software to live off the land, planting and then spreading itself before deploying its ransomware.

September 18, 2023 at 11:01 PM

Shogo K.

@syoon.bsky.social

Facebook Messenger phishing wave targets 100K business accounts per week

Hackers use a massive network of fake and compromised Facebook accounts to send out millions of Messenger phishing messages to target Facebook business accounts with password-stealing malware.

www.bleepingcomputer.com/news/google/...

September 12, 2023 at 2:01 AM

Shogo K.

@syoon.bsky.social

Google fixes another Chrome zero-day bug exploited in attacks

Google released emergency security updates to fix the fourth Chrome zero-day vulnerability exploited in attacks since the start of the year.

September 12, 2023 at 12:33 AM

Shogo K.

@syoon.bsky.social

Microsoft Teams phishing attack pushes DarkGate malware

A new phishing campaign is abusing Microsoft Teams messages to send malicious attachments that install the DarkGate Loader malware.

www.bleepingcomputer.com/news/google/...

September 11, 2023 at 12:25 AM

Shogo K.

@syoon.bsky.social

@stephaniedejesus.bsky.social welcome

September 8, 2023 at 8:15 PM

Shogo K.

@syoon.bsky.social

Google is enabling Chrome real-time phishing protection for everyone

Google announced today that it is deprecating the standard Google Chrome Safe Browsing feature and moving everyone to its Enhanced Safe Browsing feature in the coming weeks, bringing real-time phishin...