Latest Cybersecurity News and Articles

---

US Insurance Firms Sound Alarm After 66,000 Individuals Impacted by SIM Swap Attack

Two US insurance companies, Washington National Insurance and Bankers Life, have reported that the personal information of around 66,000 individuals may have been stolen by hackers using SIM-swapping attacks.

---

Americans received 15 spam calls a month in Q4 2023

Fraud calls around the globe were analyzed in a recent report. According to the report, there were 7.3 billion unwanted calls globally in Q3 2023.

---

Raspberry Robin Malware Upgrades with Discord Spread and New Exploits

The operators of Raspberry Robin are now using two new one-day exploits to achieve local privilege escalation, even as the malware continues to be refined and improved to make it stealthier than before. This means that "Raspberry Robin has access to an exploit seller or its authors develop the exploits themselves in a short period of time," Check Point said in a report this

---

'Coyote' Malware Begins Its Hunt, Preying on 61 Banking Apps

Brazilian banking trojans have a history of expanding abroad, and the emergence of new variants like "Coyote" could lead to their evolution into fully fledged initial access trojans and backdoors.

---

New Fortinet RCE Flaw in FortiOS SSL VPN Likely Exploited in Attacks

The vulnerability affects various versions of FortiOS, and the recommended solution includes upgrading to specific versions or migrating to a fixed release to address the flaw.

---

Juniper Support Portal Exposed Customer Device Info

Until earlier this week, the support website for networking equipment vendor Juniper Networks was exposing potentially sensitive information tied to customer products, including the exact devices each customer bought, as well as each device's warranty status, service contracts and serial numbers. Juniper said it has since fixed the problem, and that the inadvertent data exposure stemmed from a recent upgrade to its support portal.

---

Cyber security threats are predominantly as-a-service attacks

A recent report reveals the key threats businesses have faced in the past six months. 

---

MoqHao Android Malware Evolves with Auto-Execution Capability

Threat hunters have identified a new variant of Android malware called MoqHao that automatically executes on infected devices without requiring any user interaction. "Typical MoqHao requires users to install and launch the app to get their desired purpose, but this new variant requires no execution," McAfee Labs said in a report published this week. "While the app is

---

Ransomware threats increased by twofold in 2023

According to a recent report, ransomware attacks almost doubled from 2,200 to 4,200 in 2023. The United States faced the highest number of attacks. 

---

Ransomware Leak Site Reports Rose by 49% in 2023, but There Is Good News

While ransomware groups targeted a wide range of industries for profit, the demise of several groups in 2023 was attributed to increased pressure from law enforcement and cybersecurity organizations.

---

New Zardoor Backdoor Used in Long-Term Cyber Espionage Operation Targeting an Islamic Organization

The threat actor maintained long-term access to the victim's network, evading detection by using living-off-the-land binaries, side-loading backdoors, and leveraging open-source reverse proxy tools like Fast Reverse Proxy (FRP) and Venom.

---

Google Settles Google+ API Data Leak Lawsuit for $350M

The shareholders, led by the state of Rhode Island's retirement system, accused Google of concealing the extent of the data breach and failing to notify users about the API flaw.

---

Hyundai Motor Europe Hit by Black Basta Ransomware Attack

Hyundai Motor Europe suffered a Black Basta ransomware attack, resulting in the theft of three terabytes of corporate data, impacting various departments including legal, sales, human resources, accounting, IT, and management.

---

Chinese Threat Actors Found Spying on Dutch Defense Ministry Network

Chinese state actors used a zero-day exploit in a Fortinet VPN to breach Dutch military systems—in early 2023—to deploy the Coathanger backdoor, revealed intelligence agencies. The malware conceals its activities by intercepting system functions that might expose it. Organizations are urged to enhance their cybersecurity measures by applying timely updates and patches.

---

Meta Is Being Urged to Crack Down on UK Payment Scams

Banking fraud prevention heads from TSB Bank, Santander, and Revolut testified before a U.K. Parliament committee, highlighting the prevalence of scams on Meta-owned online marketplaces like Facebook Marketplace.

---

California Union Confirms Ransomware Attack Following Claims by LockBit

The Service Employees International Union (SEIU) Local 1000 in California is dealing with network disruptions following a cyber incident, which was claimed by the LockBit ransomware gang last month.

---

Google Will Block Android Users From Installing ‘Unsafe’ Apps in Fraud Protection Test

Google is collaborating with the Singapore government to roll out a new security feature in Google Play Protect to block the installation of potentially risky side-loaded apps, aiming to protect Android users from malware-enabled scams.

---

Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA

Introduction The modern software supply chain represents an ever-evolving threat landscape, with each package added to the manifest introducing new attack vectors. To meet industry requirements, organizations must maintain a fast-paced development process while staying up-to-date with the latest security patches. However, in practice, developers often face a large amount of security work without

---

Feds Warn Health Sector About Akira Ransomware Again, Amid New Attacks

The Akira ransomware group poses a significant threat to the U.S. healthcare sector and has targeted organizations in multiple industries, using tactics such as spear-phishing and exploiting vulnerabilities in VPN software.

---

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote. "This malware utilizes the Squirrel installer for distribution, leveraging Node.js and a relatively new multi-platform programming language called Nim as a loader to complete its infection," Russian cybersecurity firm Kaspersky said in a Thursday report. What