UPDATED
Malwarebytes Labs · · Medium severity
Researchers have analyzed a new Android banking Trojan called Rokarolla. It can effectively take over a device, steal banking and crypto login details from more than 200 apps, and quietly monitor much of what you do on your phone. On an...
Help Net Security · · Medium severity
A newly discovered Android banking trojan, dubbed Rokarolla, targets 217 banking and cryptocurrency applications and can execute 137 commands on infected devices, according to researchers at Zimperium. Named after its...
Malwarebytes Labs · · Medium severity
Our job is to protect people from online threats, and independent testing is one of the best ways to measure how well we’re doing. Malwarebytes nabbed AV-TEST’s Top Product award after scoring 17.5 points out of a possible 18 in the...
BleepingComputer · · Medium severity
A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 137 commands.
TNW · · Medium severity
Security researchers at Zimperium’s zLabs have documented a new Android banking trojan that targets 217 banking and cryptocurrency applications and carries 137 remote commands, giving an operator near-total control of an infected phone....
The Hacker News · · Medium severity
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress,...
BleepingComputer · · Medium severity
Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidden in wallpaper packages.
BleepingComputer · · Medium severity
GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected.
The Hacker News · · Medium severity
Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cryptocurrency apps and packs 137 remote commands. Together, they give an operator near-total control of an...
Infosecurity Magazine · · Medium severity
Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts
HackRead · · Medium severity
Zimperium researchers discover a new mobile Trojan that hijacks clipboards, blocks bank calls, and takes complete control of Android devices.
BleepingComputer · · Medium severity
Windows variants for the SprySOCKS Linux malware have been used in attacks targeting government organizations in at least four countries.
The Hacker News · · Medium severity
The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver malware called NarwhalRAT. "The attack email...
The Hacker News · · Medium severity
Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi)....
HackRead · · Medium severity
Over 50 Android apps on official stores spread MagicAd trojan, using system tricks to force background ads even after infected apps are closed.
HackRead · · Medium severity
Kaspersky found Argamal malware hidden in hentai game installers, giving hackers remote access through working games shared on adult sites and torrents.
Slashdot · · Medium severity
More than 1,500 user-contributed packages in the Arch Linux User Repository "AUR" were infected with malware, reports Phoronix: The last message in the thread over this security incident is noting that Arch Linux developers have deleted...
Malwarebytes Labs · · Medium severity
A new Windows malware campaign hides inside pirated PC games and modified installers for franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Researchers estimate that more than 400,000 devices worldwide have been...
Malwarebytes Labs · · Medium severity
Short-form video platforms like TikTok and Instagram Reels have become the latest way cybercriminals spread malware. We’ve already seen attackers move away from traditional phishing emails and toward tactics that trick people into...
HackRead · · Medium severity
Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions.
HackRead · · Medium severity
Over 20 Linux packages were compromised in the Atomic Arch campaign, which abuses AUR ownership transfers to drop rootkit-like malware.
Infosecurity Magazine · · Medium severity
MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto
Infosecurity Magazine · · Medium severity
Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding
CSO Online Security · · Medium severity
A botnet made up of compromised small office and Internet of Things devices has grown into a larger reconnaissance network capable of rapidly identifying vulnerable internet-facing systems after public vulnerability disclosures,...
The Hacker News · · Medium severity
Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO [small office and home office] and IoT...
The Hacker News · · Medium severity
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest...
IT Pro · · Medium severity
https://cdn.mos.cms.futurecdn.net/aWfskavxoVSMDy6cDWtYmJ.jpg
IT Pro ·
https://cdn.mos.cms.futurecdn.net/8Y8JDDTQ7XDEk49FoAFP2S.png
BleepingComputer · · Medium severity
More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens.
Infosecurity Magazine · · Medium severity
Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools
TechRadar · · Medium severity
TechRadar · · Medium severity
Hands on a laptop with overlaid logos representing network security
The Hacker News · · Medium severity
Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsuspecting users through a Traffic Distribution System (TDS) and deliver malware families like Remus Stealer,...
BleepingComputer · · Medium severity
A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the Atlas backdoor.
Digital Trends · · Medium severity
Malwarebytes just launched a free tool that lets you paste any phone number and find out in seconds whether it has been flagged as a scam.
TechRadar ·
The letters AI in a box in the middle of a vast digital room divided by beams of line
TechRadar · · Medium severity
HackRead · · Medium severity
Proofpoint says TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.
Checkpoint Research · · Medium severity
Research by: Alexey Bukhteyev Key Takeaways Check Point Research investigateda large-scale operation that impersonates open-source and freeware projects to capture search traffic, including lookalikes for researcher and security tooling...
TechRadar · · Medium severity
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free