Cybersecurity News
Android malware combo takes out loans and relays…
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it…
Cybersecurity News
Nearly 800 Malicious npm Packages Deliver Cross-Platform…
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware…
Cybersecurity News
Malware Abuses Windows Hello for Business Key to…
A newly demonstrated technique shows how malware in a compromised Windows user session can abuse Windows Hello for Business (WHFB) cryptographic keys to…
Cybersecurity News
Malware Can Abuse Windows Hello for Business Keys for…
Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim’s Windows Hello…
Cybersecurity News
ClickFix attack pushes macOS infostealer for crypto…
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data,…
Cybersecurity News
New Attack Methods Enable Malware to Hijack…
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation. The post New Attack Methods Enable Malware to…
Cybersecurity News
DOUBLECUP Uses ClickFix and Cached PNGs to Deliver…
A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims’ browser…
Cybersecurity News
Google Password Manager Attacks Could Let Malware Hijack…
Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything at…
Cybersecurity News
New DOUBLECUP ClickFix service hides malware in browser…
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims’ browsers, ultimately…
Cybersecurity News
New Pass-ta-key attacks let malware hijack Google-synced…
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager’s synced…