Email Defenses Under Siege: Phishing Attacks Dramatically Improve
Dark Reading 08.10.2022 15:00
About 1 in 5 phishing email messages reach workers‘ inboxes, as attackers get better at dodging Microsoft’s platform defenses and defenders run into processing limitations.
macOS: ZIP-Archive können Apples Gatekeeper umgehen
Heise Security 07.10.2022 18:01
Ein Bug im Packprogramm von macOS macht es möglich, in Archivdateien unsignierten Schadcode auszuliefern, der ohne Warnung ausgeführt wird. Ein Patch liegt vor.
Facebook Detects 400 Android and iOS Apps Stealing Users Log-in Credentials
The Hacker News 07.10.2022 15:52
Meta Platforms on Friday disclosed that it had identified over 400 malicious apps on Android and iOS that it said targeted online users with the goal of stealing their Facebook login information.
"These apps were listed on the Google Play Store and Apple’s App Store and disguised as photo editors, games, VPN services, business apps, and other utilities to trick people into downloading them," the
Chinesische Cybergangs: Die meist-angegriffenen Sicherheitslücken
Heise Security 07.10.2022 11:54
US-amerikanische Cyber-Sicherheitsbehörden stellen eine Liste der von chinesischen Cybergangs derzeit meist-angegriffenen Sicherheitslücken bereit.
Binance Smart Chain: Betrüger ergaunern sich rund 100 Millionen Dollar
Spiegel Online 07.10.2022 11:19
Es hätte ein Rekordhack werden können. Doch nach der Notbremsung einer Binance-Blockchain konnten sich die Täter wohl nur rund hundert Millionen Dollar in Kryptowährungen beschaffen – aus dem Nichts.
Eternity Group Hackers Offering New LilithBot Malware-as-a-Service to Cybercriminals
The Hacker News 06.10.2022 14:57
The threat actor behind the malware-as-a-service (MaaS) known as Eternity Group has been linked to new piece of malware called LilithBot.
"It has advanced capabilities to be used as a miner, stealer, and a clipper along with its persistence mechanisms," Zscaler ThreatLabz researchers Shatak Jain and Aditya Sharma said in a Wednesday report.
"The group has been continuously enhancing the malware,