News

Hackers exploit a blind spot by hiding malware inside DNS records
Researchers have known for almost a decade that threat actors sometimes use DNS records to host malicious PowerShell scripts.
New software makes it easy for Chinese police to extract phone data
Mobile security company Lookout found a new malware/spyware system that Chinese police departments use to extract data from ...
WordPress users beware - this popular plugin has been hijacked to push potential malware
Gravity Forms is a premium WordPress plugin enabling users to build different forms using a drag-and-drop interface. It ...
A new malware is infecting Gigabyte motherboards – and there likely won't be a fix any time soon
Binarly spotted multiple flaws in UEFI firmware built by AMI AMI released fixes months ago, so users should update now Many ...
Tom's Hardware on MSN6h
Malware found embedded in DNS, the system that makes the internet usable, except when it doesn't
D omainTools reported that someone found a way to embed malware in Domain Name System (DNS) records, which means we have something new to blame on the system responsible for pretty much every ...
Android malware Konfety uses malformed APKs to evade detection
A new variant of the Konfety Android malware emerged with a malformed ZIP structure along with other obfuscation methods that ...
Explore more
SecurityWeek9h
SonicWall SMA Appliances Targeted With New ‘Overstep’ Malware
A threat actor that may be financially motivated is targeting SonicWall devices with a backdoor and user-mode rootkit.
AI malware could beat Microsoft Defender up to 8 percent of the time
A new Black Hat presentation using an open source language model could represent a giant leap forward for easy Windows ...
North Korean XORIndex malware hidden in 67 malicious npm packages
North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new ...
Infosecurity Magazine7h
SquidLoader Malware Campaign Targets Hong Kong Financial Sector
A new malware campaign targeting Hong Kong finance has been identified, featuring SquidLoader to deploy Cobalt Strike Beacon ...
This Android malware poses as real apps to take you to dangerous sites and flood your phone with spam
From there, you want to make sure that Google Play Protect is enabled on your Android phone. This pre-installed security app scans all of your existing apps and any new ones you download for malware.
TechJuice17h
This Open-Source Malware Has Turned Into A Global Cyber Threat (And You Should Be Worried)
An open-source malware can now spawn into DCRat, Venom RAT, and JasonRAT, powering phishing, data theft, and MaaS campaigns worldwide.