22 Nov, 2024

Telegram zero-day allowed sending malicious Android APKs as videos

A Telegram for Android zero-day vulnerability dubbed ‘EvilVideo’ allowed attackers to send malicious Android APK payloads disguised as video files. A threat actor named ‘Ancryno’ first began selling the Telegram zero-day exploit on June 6, 2024, in a post on the Russian-speaking XSS hacking forum, stating the flaw existed in Telegram v10.14.4 and older. ESET […]

3 mins read

Top 10 Android Apps Not Available On Play Store

It’s no secret that the Google Play Store is the go-to place for Android users to install apps or games. While over 3.5 million apps are on the platform, some of the most amazing open-source apps aren’t available. Here are ten apps you should install right away! App Name Unique Feature Round Sync Merges multiple cloud storage […]

7 mins read

15 best free Android apps available right now

Believe it or not, you can get some sweet apps without spending a dime. Here are the best free Android apps. Android’s biggest strength is its app ecosystem. There are tons of Android apps and thousands of people have downloaded them billions of times. Some of them cost money, and some of them don’t. Usually, […]

14 mins read

CapraRAT malware targeting Android users with fake apps

A politically driven threat actor has unleashed a fresh malware offensive targeting Android devices. Experts at SentinelLabs have identified a new tool, CapraRAT, deployed by the Pakistani state-sponsored hacking group Transparent Tribe. This sophisticated trojan is designed to monitor user activities, with Indian users being the primary focus. Echoing its past strategies, Transparent Tribe’s CapraRAT […]

2 mins read

New Ghost Tap attack abuses NFC mobile payments to steal money

Cybercriminals have devised a novel method to cash out from stolen credit card details linked to mobile payment systems such as Apple Pay and Google Pay, dubbed ‘Ghost Tap,’ which relays NFC card data to money mules worldwide. The tactic builds upon the methods previously deployed by mobile malware like NGate, documented by ESET in August, […]

4 mins read

Brave on iOS adds new “Shred” button to wipe site-specific data

Brave Browser 1.71 for iOS introduces a new privacy-focused feature called “Shred,” which allows users to easily delete site-specific mobile browsing data. Many sites use first-party cookies for paywall systems and usage limits, which technically enables user tracking across sessions and makes this data susceptible to sharing with third parties. Brave’s new Shred feature works […]

2 mins read

Chinese hackers exploit Fortinet VPN zero-day to steal credentials

Chinese threat actors use a custom post-exploitation toolkit named ‘DeepData’ to exploit a zero-day vulnerability in Fortinet’s FortiClient Windows VPN client that steal credentials. The zero-day allows the threat actors to dump the credentials from memory after the user authenticated with the VPN device Volexity researchers report that they discovered this flaw earlier this summer and […]

3 mins read

Signal introduces convenient “call links” for private group chats

The Signal messenger application has announced a set of new features aimed at making private group chats more convenient and easier for people to join. The highlight feature announced is “call links,” which allow users to create and share links with other Signal users without needing to create a group chat. The links can be […]

2 mins read

Windows 11 Vs Windows 10: Complete Guide to Differences, Performance, and Features

Windows 11 and Windows 10 offer distinct experiences for users. The latest version, Windows 11, brings a fresh look and new features to the table. It sports a centered taskbar and redesigned Start menu, giving the interface a modern feel. Windows 11 focuses on enhancing productivity and gaming performance, but it comes with stricter hardware requirements […]

7 mins read

Microsoft warns Azure Virtual Desktop users of black screen issues

Microsoft warned customers they might experience up to 30 minutes of black screens when logging into Azure Virtual Desktop (AVD) after installing the KB5040525 Windows 10 July 2024 preview update. Additional symptoms include single sign-on (SSO) failures (on Office applications such as Outlook and Teams) blocking connections to backend services or preventing data syncs and […]

1 min read