Alien Android Banking Trojan Sidesteps 2FA

A new 'fork' of the Cerberus banking trojan, called Alien, targets victims' credentials from more than 200 mobile apps, including Bank of America and Microsoft Outlook. Source: Threadpost

Threat landscape for industrial automation systems. H1 2020 highlights

Overall downward trend for percentages of attacked computers globally Beginning in H2 2019 we have observed a tendency for decreases in the percentages of attacked computers, both in the ICS and in...

Zerologon Patches Roll Out Beyond Microsoft

A Samba patch and a micropatch for end-of-life servers have debuted in the face of the critical vulnerability. Source: Threadpost

Gamer Credentials Now a Booming, Juicy Target for Hackers

Credential abuse drives illicit market for in-game rare skins, special weapons and unique tools. Source: Threadpost

Critical Industrial Flaws Pose Patching Headache For Manufacturers

When it comes to patching critical flaws, industrial firms face various challenges - with some needing to shut down entire factories in order to apply updates. Source: Threadpost

CISA: LokiBot Stealer Storms Into a Resurgence

The trojan has seen a big spike in activity since August, the Feds are warning. Source: Threadpost

OldGremlin Ransomware Group Bedevils Russian Orgs

The cybercriminal group has plagued firms with ransomware, sent via spear phishing emails with COVID-19 lures, since March. Source: Threadpost

Looking for sophisticated malware in IoT devices

One of the motivations for this post is to encourage other researchers who are interested in this topic to join in, to share ideas and knowledge and to help build more...

Google Chrome Bugs Open Browsers to Attack

Google's new release of Chrome 85.0.4183.121 for Windows, Mac, and Linux fixes 10 security flaws. Source: Threadpost

Known Citrix Workspace Bug Open to New Attack

Windows MSI files provide an opening for attackers even though the bug was mostly patched in July. Source: Threadpost
- Advertisement -

APLICATIONS

Feds Indict 281 People for Involvement in Massive E-Mail Fraud Scheme

A coordinated effort between multiple agencies arrested suspects in Nigeria, the U.S. and eight other countries as well as seized nearly $3.7 million. Source: Threadpost