Latest Cybersecurity News and Articles

---

Over 800 Phony Temu Domains Lure Shoppers into Credential Theft

Temu is the latest brand chosen by scammers for their phishing scams. Hackers are using Temu’s giveaway rewards to entice users to give away their credentials, with over 800 new domains registered as “Temu” in the last three months.

---

Is Your Crypto Safe? XPhase Clipper Malware Steals Coins with a Click

The malware is spread through deceptive websites impersonating legitimate cryptocurrency platforms, with a noticeable emphasis on targeting Indian cryptocurrency enthusiasts.

---

New RustDoor macOS Malware Impersonates Visual Studio Update

RustDoor has various commands to control compromised systems, exfiltrate data, and establish persistence, and it has been distributed under multiple names while remaining undetected for at least three months.

---

AI-generated voices in robocalls declared illegal by the FCC

A recent ruling by the FCC has made AI-generated voices in robocalls illegal, providing more opportunities for law enforcement to bring scam artists to justice. 

---

US Insurance Firms Sound Alarm After 66,000 Individuals Impacted by SIM Swap Attack

Two US insurance companies, Washington National Insurance and Bankers Life, have reported that the personal information of around 66,000 individuals may have been stolen by hackers using SIM-swapping attacks.

---

Americans received 15 spam calls a month in Q4 2023

Fraud calls around the globe were analyzed in a recent report. According to the report, there were 7.3 billion unwanted calls globally in Q3 2023.

---

Raspberry Robin Malware Upgrades with Discord Spread and New Exploits

The operators of Raspberry Robin are now using two new one-day exploits to achieve local privilege escalation, even as the malware continues to be refined and improved to make it stealthier than before. This means that "Raspberry Robin has access to an exploit seller or its authors develop the exploits themselves in a short period of time," Check Point said in a report this

---

'Coyote' Malware Begins Its Hunt, Preying on 61 Banking Apps

Brazilian banking trojans have a history of expanding abroad, and the emergence of new variants like "Coyote" could lead to their evolution into fully fledged initial access trojans and backdoors.

---

New Fortinet RCE Flaw in FortiOS SSL VPN Likely Exploited in Attacks

The vulnerability affects various versions of FortiOS, and the recommended solution includes upgrading to specific versions or migrating to a fixed release to address the flaw.

---

Juniper Support Portal Exposed Customer Device Info

Until earlier this week, the support website for networking equipment vendor Juniper Networks was exposing potentially sensitive information tied to customer products, including the exact devices each customer bought, as well as each device's warranty status, service contracts and serial numbers. Juniper said it has since fixed the problem, and that the inadvertent data exposure stemmed from a recent upgrade to its support portal.

---

Cyber security threats are predominantly as-a-service attacks

A recent report reveals the key threats businesses have faced in the past six months. 

---

MoqHao Android Malware Evolves with Auto-Execution Capability

Threat hunters have identified a new variant of Android malware called MoqHao that automatically executes on infected devices without requiring any user interaction. "Typical MoqHao requires users to install and launch the app to get their desired purpose, but this new variant requires no execution," McAfee Labs said in a report published this week. "While the app is

---

Ransomware threats increased by twofold in 2023

According to a recent report, ransomware attacks almost doubled from 2,200 to 4,200 in 2023. The United States faced the highest number of attacks. 

---

Ransomware Leak Site Reports Rose by 49% in 2023, but There Is Good News

While ransomware groups targeted a wide range of industries for profit, the demise of several groups in 2023 was attributed to increased pressure from law enforcement and cybersecurity organizations.

---

New Zardoor Backdoor Used in Long-Term Cyber Espionage Operation Targeting an Islamic Organization

The threat actor maintained long-term access to the victim's network, evading detection by using living-off-the-land binaries, side-loading backdoors, and leveraging open-source reverse proxy tools like Fast Reverse Proxy (FRP) and Venom.

---

Google Settles Google+ API Data Leak Lawsuit for $350M

The shareholders, led by the state of Rhode Island's retirement system, accused Google of concealing the extent of the data breach and failing to notify users about the API flaw.

---

Hyundai Motor Europe Hit by Black Basta Ransomware Attack

Hyundai Motor Europe suffered a Black Basta ransomware attack, resulting in the theft of three terabytes of corporate data, impacting various departments including legal, sales, human resources, accounting, IT, and management.

---

Chinese Threat Actors Found Spying on Dutch Defense Ministry Network

Chinese state actors used a zero-day exploit in a Fortinet VPN to breach Dutch military systems—in early 2023—to deploy the Coathanger backdoor, revealed intelligence agencies. The malware conceals its activities by intercepting system functions that might expose it. Organizations are urged to enhance their cybersecurity measures by applying timely updates and patches.

---

Meta Is Being Urged to Crack Down on UK Payment Scams

Banking fraud prevention heads from TSB Bank, Santander, and Revolut testified before a U.K. Parliament committee, highlighting the prevalence of scams on Meta-owned online marketplaces like Facebook Marketplace.

---

California Union Confirms Ransomware Attack Following Claims by LockBit

The Service Employees International Union (SEIU) Local 1000 in California is dealing with network disruptions following a cyber incident, which was claimed by the LockBit ransomware gang last month.