Google has announced new AI-powered defenses against scam message and call forwarding abuse on Android, which are currently rolling out to eligible devices. The new measures aim to counter the increasing sophistication of scams targeting mobile users, including fraudulent bank alerts and voice cloning attacks. “Mobile scams have evolved far beyond simple robocalls and phishing … Read more
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that imitated two popular utility tools, yay and paru. AUR is a community-maintained, widely used package index for Arch Linux and derived distributions that hosts package build scripts (PKGBUILDs) for third-party and proprietary tools, beta versions or older package versions that are no … Read more
A macOS dropper was found in a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to provide a persistent and stealthy backdoor. Jamf researchers first noticed this still-in-development malware in mid-September. Within days, additional samples were found, indicating that testing and development has now progressed to deployment. The malware infection process … Read more
An ongoing malware campaign is using SEO-optimized GitHub repositories to impersonate well-known software companies in order to promote a previously undocumented information theft operation called Rapuncel. LastPass and Delphos Labs have uncovered the campaign in which they reportedly impersonate the password manager brand and at least 39 other companies. In addition to the Rapuncel infostealer, … Read more
Former banking official sentenced to four years in prison for accepting $470,000 in cryptocurrency bribes and false letters of credit. A former Hong Kong bank official who falsely authenticated more than $1.6 billion in letters of credit was sentenced to four years in prison and ordered to repay more than $470,000 he received in cryptocurrency … Read more