Grandoreiro banking malware dismantled – Safe week with Tony Anscombe

video The banking Trojan, which mainly targeted Brazil, Mexico and Spain, locked the victim’s screen, recorded keystrokes, simulated mouse and keyboard activity, and displayed fake pop-up windows 02 February 2024…

Cloudflare falls victim to Okta breach, Atlassian systems breached

Cloudflare was a victim of Okta’s extensive supply chain campaign last fall, with a data breach impacting its Atlassian Bitbucket, Confluence, and Jira platforms starting on Thanksgiving Day. “Based on…

Domestic hackers access source code and internal documents

02 February 2024PressroomData breach/cloud security Cloudflare revealed that it was the target of a likely nationwide attack in which the threat actor leveraged stolen credentials to gain unauthorized access to…

Google Play Used to Spread APT’s ‘Patchwork’ Spying Apps

The Indian group APT Patchwork, known for its targeted spear phishing cyber attacks against Pakistanis, was caught abusing Google Play to distribute six different Android spy applications posing as legitimate…

INTERPOL arrests 31 people in global operation, identifies over 1,900 IPs linked to ransomware

02 February 2024PressroomCybercrime/Malware An INTERPOL-led collaborative operation against phishing attacks, banking malware and ransomware has led to the identification of 1,300 suspicious IP addresses and URLs. The law enforcement effort,…

South African Railways has lost over $1 million to a phishing scam

The South African Rail Agency lost around R30.6 million ($1.6 million) after the transport network fell victim to a phishing scam. In his annual reportthe Passenger Rail Agency of South…

Mastodon vulnerability allows hackers to take control of any decentralized account

03 February 2024PressroomVulnerability/Social media Decentralized social network Mastodon has revealed a critical security flaw that allows malicious actors to impersonate and take control of any account. “Due to insufficient source…

Myanmar hands down mafia bosses in crackdown on cyber fraud

Myanmar authorities have transferred 10 suspects accused of being involved in organized cyber fraud, money laundering and human trafficking in Myanmar and Mekong to the Chinese government. The list of…

US sanctions 6 Iranian officials for cyberattacks on critical infrastructure

03 February 2024PressroomIntelligence/cybersecurity agency The US Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions against six officials associated with Iran’s intelligence agency for attacking critical infrastructure entities in…

Generation Z Challenges, CISO Responsibilities, and Cathay Pacific Case Study

Welcome to CISO Corner, the weekly collection of Dark Reading articles designed specifically for readers and security leaders involved in security operations. Each week we will offer articles collected from…