Italian authorities have arrested a man accused of cyberespionage linked to the Silk Typhoon threat group, which allegedly targeted COVID-19 vaccine data. The suspect, identified as Zewei Xu, was taken into custody as part of an ongoing investigation into espionage activities tied to the pandemic’s critical medical research. The case, widely reported under the headline […]
Cybercriminals are increasingly turning to subscription-based malware platforms, pushing global identity theft incidents to unprecedented levels. Infostealer services drive surges naturally in stolen credentials by offering low-cost, scalable access to malicious tools. These services allow even low-skilled actors to deploy spyware that captures login data, personal information, and financial credentials. Hackers then trade or sell […]
Cybersecurity analysts have uncovered a malicious campaign that exploits known vulnerabilities in TBK digital video recorders and Four-Faith routers to form a new distributed denial-of-service (DDoS) botnet named RondoDox. The RondoDox Botnet hijacks TBK DVR-4104 and DVR-4216 models by leveraging CVE-2024-3721, a medium-severity command injection flaw. Attackers also target Four-Faith routers using CVE-2024-12856, which affects […]
Cybersecurity firm CTM360 has uncovered a global online fraud operation involving more than 17,000 fake news websites impersonating well-known media outlets. The campaign, dubbed “BaitTrap Uncovers 17000 Fake,” spans at least 50 countries and uses deceptive pages that mimic platforms like CNN, BBC and CNBC to lure victims into fraudulent investment schemes. These fake sites, […]
The Atomic macOS malware backdoor has undergone a significant upgrade, adding a persistent access mechanism that poses heightened risks to Apple users globally. Previously known for rapid data theft, the malware now includes a backdoor that allows attackers to maintain long-term control over infected systems, execute remote commands and evade detection. Researchers at Moonlock, MacPaw’s […]
Apple patched several critical vulnerabilities in macOS’s SMBClient that exposed users to remote code execution and system crashes. These flaws, identified as CVE-2025-24269 and CVE-2025-24235, affect the SMB filesystem client used for mounting remote file shares. Apple patches macOS flaws by improving input validation and enforcing stricter access controls, urging users to update immediately and […]
A China-linked cyber group known as Houken compromised France’s critical infrastructure by exploiting zero-day vulnerabilities in Ivanti products, according to a report from ANSSI, the country’s national cybersecurity agency. The Houken Hack Hits France incident underscores growing concerns over state-sponsored cyber operations targeting essential systems across Europe. ANSSI’s investigation revealed that attackers used previously unknown […]
A Pakistan-based cyber-espionage group known as Transparent Tribe has deployed a new strain of Linux malware to target India’s defense sector, according to cybersecurity researchers. The latest Transparent Tribe hacks India campaign highlights a shift in the group’s tactics, with a strong focus on infiltrating Linux-based systems often used in secure environments. Security analysts linked […]
Brazilian authorities arrested a Brazil IT worker held responsible for facilitating a $100 million heist targeting the PIX instant payment system. João Roque, 48, an IT employee at C&M, allegedly sold system access for roughly R$15,000 and helped hackers execute fraudulent transactions affecting at least six financial institutions. Police detained Roque in São Paulo’s Jaraguá […]
A new cyber-espionage campaign targeting Russian companies has been linked to a previously unknown Windows-based malware strain named Batavia. According to cybersecurity firm Kaspersky, the operation has remained active since July 2024. The Batavia Spyware Hits Russian firms through emails disguised as contract-related communications, embedding malicious links that initiate the infection process. Researchers said attackers […]