They have discovered malware called iAuthFlow v2 that can continue to access user accounts even after the password is changed, through phishing techniques and the secret creation of a new passkey controlled by the attacker. (translated)
A new malware for Windows has been discovered, called SLEEPWALKER, which remains inactive on the computer until it receives a specific signal to activate, complicating its detection by security tools. (translated)
A new malware for Android, called ToxicPanda 2.0, disguises itself as a banking app to steal users' PIN codes through fake screens and malicious permissions, affecting 349 applications in 16 countries. (translated)
The use of IPTV applications to watch football for free can expose users to malware that has the ability to take control of their devices, recording sensitive information, intercepting SMS, and accessing banking applications. (translated)
Pirates are exploiting the anticipation around Grand Theft Auto VI by spreading a fake demo containing malware designed to steal sensitive user information, while Rockstar warns about these fraudulent sites impersonating its identity. (translated)
The growing anticipation for Grand Theft Auto VI has attracted the attention of hackers who exploit the moment to spread malware through fraudulent sites that promise non-existent demos, compromising the security of players' accounts. (translated)
The first malware designed to infect Android car screens has been discovered, called JarService, which installs itself without user intervention through the screen's update system and allows cybercriminals to steal information and commit ad fraud without the driver noticing. (translated)
The CloudEye virus is spreading at an alarming rate in the Czech Republic and surpasses other malicious codes, downloading additional malware and threatening the security of user data, which underscores the importance of secure password management and caution when opening email attachments. (translated)
Cyber attacks on Austrian small and medium-sized enterprises (SMEs) are increasing, as they often have insufficient IT security measures and are affected by targeted attacks, particularly through phishing and malware, which is why regular penetration tests and security audits are strongly recommended. (translated)
The new 'Computer History' feature of ChatGPT, which logs users' activity on their computers to enhance the personalization and efficiency of artificial intelligence, poses serious privacy risks due to the lack of encryption of the collected information, which could allow unauthorized access to sensitive data by malware or other malicious applications. (translated)
Security researchers warn of a dangerous malware that disguises itself as a download of the new film "The Odyssey" to steal passwords and personal data from users. (translated)
The U.S. Federal Communications Commission is drafting a proposal to prohibit the importation of Chinese electronic components in data centers, with the aim of preventing information theft and the installation of malware that could affect the development of artificial intelligence. (translated)
Microsoft warns of hacker attacks in hotel Wi-Fi networks, as the Russian hacker group Storm-2945 specifically exploits guest logins in hotels and airports to infect devices with malware and steal user data. (translated)
The United States is considering banning imports of Chinese optical transceivers for data centers, citing concerns about data theft and the installation of malware by Chinese companies, while China promises to retaliate if the measure is implemented. (translated)
Security researchers warn of a new Outlook hack that allows unauthorized access to email accounts simply by viewing a prepared email, and that even changing the password does not ensure safety for affected users, as the malware "OWAReaper" installs an unknown backdoor that secures long-term access for attackers. (translated)
Researchers have discovered a malware campaign that exploits SEO poisoning to impersonate more than 70 fake domains of popular Windows 11 applications, thus offering malicious downloads that can compromise user security. (translated)
Un estudiante de Florida fue detenido por el FBI tras ser acusado de ocultar malware en videojuegos de Steam, logrando infectar 8,000 ordenadores y robar 220,000 dólares, en una operación que buscaba acceder a billeteras de criptomonedas a través de juegos aparentemente legítimos. #Ciberseguridad #Malware #CryptoFraude
About the last cyber-attack.. Normal firewall vs my hardware firewall ( Neural Guardian) Attack Type,Enterprise Firewall (Reactive),Neural Guardian (NG) (Deterministic) DDoS / Flood,Saturates CPU/RAM via inspection,Hardware Cutoff: DMA throughput limit Brute Force,Log-based & Rate-limiting (Slow),Invisibility: No login exposed on bus Malware,Signature scanning (Vulnerable to Zero-Days),Vector Matching: Isolate on entropy mismatch MiM (Man-in-the-Middle),Relies on handshake verification,Physical Integrity: TDR impedance monitoring Why this is a "Game Over" for traditional security: DDoS: While firewalls struggle to parse millions of packets, NG acts like an electrical circuit breaker. Once the hardware DMA bandwidth is hit, it physically disconnects the flow. It doesn't "try" to filter; it just stops the traffic. Brute Force: In an enterprise firewall, there's always a login page or an exposed service. NG moves the management to an OOB (Out-Of-Band) tunnel that doesn't even exist on the data plane. You can't attack what you can't reach. Malware: Firewalls look for "known bad guys" (signatures). NG looks for "weird behavior" (Vectorial Footprinting). If the data entropy doesn't match the established baseline, it's purged instantly by the pipeline. MiM (Man-in-the-Middle): This is the killer feature. Firewalls hope for secure handshakes. NG uses TDR (Time Domain Reflectometry) to scan the physical integrity of the wire. If a hacker even touches the cable to insert a tap, the impedance change alerts the system before the first byte is sniffed. Bottom line: We are moving from Software-Managed Security (which assumes chaos) to Hardware-Encoded Integrity (which enforces order).
El malware RedHook representa una nueva y peligrosa amenaza para los dispositivos Android, ya que permite a ciberdelincuentes controlar remotamente el móvil mediante permisos de accesibilidad, accediendo a funciones como la cámara, la lectura de mensajes o la captura de pantallas sin el conocimiento del usuario. #Malware #Ciberseguridad #Android
Google, en colaboración con el FBI y otros socios de ciberseguridad, ha desactivado una vasta red de ciberdelincuentes llamada NetNut, que comprometía más de dos millones de dispositivos Android para ocultar ataques y facilitar actividades delictivas en internet. #Ciberseguridad #Malware #Android
