19 Sep, 2024

Fake AI editor ads on Facebook push password-stealing malware

​A Facebook malvertising campaign targets users searching for AI image editing tools and steals their credentials by tricking them into installing fake apps that mimic legitimate software. The attackers exploit the popularity of AI-driven image-generation tools by creating malicious websites that closely resemble legitimate services and trick potential victims into infecting themselves with information stealer […]

2 mins read

Fraud ring pushes 600+ fake web shops via Facebook ads

A malicious fraud campaign dubbed “ERIAKOS” promotes more than 600 fake web shops through Facebook advertisements to steal visitors’ personal and financial information. The sites promote products from well-known brands and include significant discounts to draw in visitors but are only accessible via mobile devices to evade detection by security scanners. Recorded Future discovered the […]

5 mins read

Greasy Opal’s CAPTCHA solver still serving cybercrime after 16 years

A developer that researchers now track as Greasy Opal, operating as a seemingly legitimate business, has been fueling the cybercrime-as-a-service industry with a tool that bypasses account security solutions and allows bot-led CAPTCHA solving at scale. Greasy Opal has been active for more nearly two decades and tailors its tools based on customers’ targeting needs. […]

5 mins read

Hackers steal banking creds from iOS, Android users via PWA apps

Threat actors started to use progressive web applications to impersonate banking apps and steal credentials from Android and iOS users. Progressive web apps (PWA) are cross-platform applications that can be installed directly from the browser and offer a native-like experience through features like push notifications, access to device hardware, and background data syncing. Using this type of […]

4 mins read

New LianSpy malware hides by blocking Android security feature

A previously undocumented Android malware named ‘LightSpy’ has been discovered targeting Russian users, posing on phones as an Alipay app or a system service to evade detection. Analysis shows that LianSpy has been actively targeting Android users since July 2021, but its extensive stealth capabilities helped it remain undetected for over three years. Kaspersky researchers […]

4 mins read

Email addresses of 15 million Trello users leaked on hacking forum

A threat actor has released over 15 million email addresses associated with Trello accounts that were collected using an unsecured API in January. Trello is an online project management tool owned by Atlassian. Businesses commonly use it to organize data and tasks into boards, cards, and lists. In January, GeekFeed reported that a threat actor known as ’emo’ […]

3 mins read

Indiana County Files Disaster Declaration Following Ransomware Attack

A County in Indiana, US, has filed a disaster declaration following a ransomware attack on local government networks, which has prevented the administration of critical services. Clay County made the declaration after confirming the incident has resulted in an inability to operate Clay County Courthouse and Clay County Probation/Community Corrections facilities. The July 11 declaration […]

3 mins read

15 best free Android apps available right now

Believe it or not, you can get some sweet apps without spending a dime. Here are the best free Android apps. Android’s biggest strength is its app ecosystem. There are tons of Android apps and thousands of people have downloaded them billions of times. Some of them cost money, and some of them don’t. Usually, […]

14 mins read

Meta’s ‘Pay or Consent’ Data Model Breaches EU Law

Regulators say the tech giant breached the Digital Markets Act in requiring Instagram and Facebook users to pay if they don’t want personal data used to generate targeted ads. European Union regulators have accused Meta of breaching the bloc’s stringent new competition rules by compelling users of Instagram and Facebook to pay to avoid having […]

2 mins read