Malware

• 

  Malicious Machine Learning Models Discovered on Hugging Face: Report

  Hugging Face, the artificial intelligence (AI) and machine learning (ML) hub, is said to contain malicious ML models. A cybersecurity research firm discovered two such models that contain code that can be used to package and distribute malware to those who download these files. As per the researchers, threat actors are using a hard-to-detect method...

• 

  SparkCat Crypto Stealer Malware Infected Multiple Apps on Play Store, App Store

  Security researchers have discovered several apps on the App Store and Google Play infected with the SparkCat crypto stealer malware. The apps contained a malicious SDK using optical character recognition (OCR) to steal "crypto wallet recovery phrases" from users' screenshots. Notably, this is the first time such cryptocurrency-stealing malware has...

• 

  Your Phone Can Be Hacked Without Clicking A Link, WhatsApp Warns Users

  WhatsApp warns of a zero-click hack attack that compromised nearly 90 users' devices without them clicking on any malicious links, highlighting the sophistication and danger of this type of cyber attack.

• 

  KuCoin Pleads Guilty, Agrees to Pay Nearly $300 Million in US Crypto Case

  KuCoin has pleaded guilty on Monday to operating an unlicensed money transmitting business. Prosecutors said Seychelles-based KuCoin had been used to facilitate billions of dollars of suspicious transactions, and to transmit potential criminal proceeds including from darknet markets and malware, ransomware and fraud.

• 

  Crypto Scammers Are Reportedly Posing as Job Recruiters to Circulate Malware 

  Crypto scammers are using platforms like LinkedIn to reach out to job seekers, asking them to fix issues with video call software and subsequently injecting malicious malware to get access to the victims’ computers. 

• 

  India Tops Global List For Mobile Malware Attacks: Report

  In a startling revelation, India now tops the list for mobile malware attacks globally, surpassing the United States and Canada, with a disappointing step-up from its previous third-place ranking, according to a report.

• 

  SpyLoan Apps Installed on Over 8 Million Android Phones Amidst Rise in Predatory Loan Apps

  SpyLoan, a predatory loan application, has been detected on over 8 million Android devices, according to McAfee. Fifteen versions of the SpyLoan application have been removed or updated since they were identified, and users must remove these apps manually if they have already been downloaded.

• 

  North Korea’s BlueNoroff Group Reportedly Targeting Crypto Community Members on MacOS

  According to SentinelLabs, North Korea's BlueNoroff group is distributing fake crypto news to lure users into downloading infected multi-storage malware onto their MacBook. Earlier in September, the FBI reported that crypto consumers lost over $5.6 billion (roughly Rs. 47,029 crore) to cryptocurrency-related fraud last year.

• 

  ToxicPanda Banking Trojan Infects Over 1,500 Android Smartphones, Targets 16 Banks: Report

  ToxicPanda has been detected by security researchers as a new banking trojan, infected devices in Europe and Latin America. It is used to remotely take over accounts on compromised phones, allowing attackers to transfer funds while bypassing a bank's security measures. ToxicPanda was reportedly found on over 1,500 devices, while targeting users of ...

• 

  Necro Trojan Detected in Google Play Apps and Modded Versions of Spotify, WhatsApp

  Google Play apps as well as unofficial mods of popular apps are being targeted by attackers to spread a dangerous malware, according to security researchers. Dubbed Necro trojan, this family of malware is capable of keylogging, stealing sensitive information, installing additional malware, remote execution of commands, and more. Two apps in the Goo...

• 

  Lumma Stealer Malware Being Spread to Windows Devices via Fake Human Verification Pages, CloudSEK Says

  Lumma Stealer, a recently identified information-stealing malware, is being distributed to users via fake human verification pages. According to researchers at the cybersecurity firm CloudSEK, the malware is targeting Windows devices and is designed to steal sensitive information from the infected device. Concerningly, researchers have discovered m...

• 

  Clipper Malware Poses Threat to Crypto Transactions: Binance Urges Users to Triple-Check Withdrawal Addresses

  Crypto hackers are using Clipper malware to manipulate transaction details and steal tokens. Android users and those using web applications in the crypto community face a higher risk of attack. People frequently copy wallet addresses during transactions. As per Binance, Clipper malware intercepts and alters this clipboard data.

• 

  Government Warns Of Phishing Attack Targeting CrowdStrike Users

  CERT-In notes that these phishing attackers are also distributing Trojan malware, disguised as recovery tools.

• 

  France Announces Major Operation To Fight Cyber-Spying Ahead Of Paris Olympics

  Investigators were targeting a network of bots suspected of infecting computers with PlugX malware and of stealing data from them "notably for purposes of espionage.

• 

  Google Play Protect ‘Rescan’ Option for Flagged Apps on Android in Development: Report

  Google Play Protect is reportedly working to introduce a “Rescan” option for apps that have been previously flagged as harmful, without uninstalling them from a user's device. According to a report, the feature is still being developed by the company.