Microsoft is alerting Windows users to a new cryptocurrency clipper malware spread via USB drives. It steals clipboard data, replaces wallet addresses, and uses the Tor network for communication, posing a significant threat to digital assets.
The FBI has issued a public advisory about a rising cyber threat involving malicious traffic distribution systems (TDSs). These systems redirect users to scam websites, phishing pages, and malware downloads, bypassing firewalls and stealing sensitive information.
Microsoft has identified a new self-propagating malware, dubbed Crypto Clipper, that spreads via USB drives to steal cryptocurrency credentials. It monitors clipboards for wallet addresses and seed phrases, captures screenshots, and sends data through Tor to attacker-controlled servers, also diverting payments to attacker wallets.
Ataques de ransomware paralisam operações e exigem resgate milionário. Brasil é o 3º país mais visado, com custos médios de violação de dados em R$ 7,19 milhões. Empresas precisam de estratégias de prevenção, resposta e recuperação.
Anlässlich der Fußball-WM warnen Ermittler vor Betrugsmaschen wie Spam, Phishing und Fakeshops. Sieben Tipps helfen, sich vor Cyberkriminellen zu schützen, die Geld und Daten stehlen wollen. Vorsicht bei Gewinnspielen und illegalen Streams ist geboten.
Microsoft has temporarily removed dozens of its open source projects from GitHub after discovering malware that steals user passwords, impacting Azure and AI development tools.
Wearable health-tech startup Ultrahuman confirmed a data breach on March 27, where hackers accessed customer wellness data after stealing an employee's credentials via malware. Approximately 700 users' data was accessed, though no payment or password information was compromised.
CrowdStrike, with Google and Shadowserver, dismantled the Glassworm botnet, which targeted open source software developers to spread malware and steal passwords, compromising over 300 GitHub repositories.
Siber suçlular, akıllı telefonlardaki NFC teknolojisini kullanarak yeni ve sofistike dolandırıcılık yöntemleri geliştiriyor. Kaspersky, Android cihazlara yönelik NFC tabanlı saldırılarda %188 artış olduğunu bildirdi. Yeni zararlı yazılımlar ve 'Tersine NFC' gibi yöntemler finansal güvenliği tehdit ediyor.
A supply chain attack dubbed 'TrapDoor' is targeting crypto and AI developers, deploying malicious packages to steal wallet data, credentials, and API keys. The malware, found in developer ecosystems like npm and PyPI, aims to hijack AI coding assistants and was disseminated via GitHub.
Based Apparel, linked to FBI Director Kash Patel, went offline after being flagged for distributing 'ClickFix' malware that targeted macOS users, potentially stealing session tokens and crypto. This is the second crypto-related issue for Patel.
Kash Patel's merchandise website, Based Apparel, was taken offline on Friday following reports of it being hijacked by hackers attempting to infect visitors with malware, specifically an infostealer designed to steal credentials.
Alberth Cesar Janjon, apontado como dono de plataforma de apostas, foi preso em Campinas (SP) na Operação "Jogo Sujo". Ele é suspeito de liderar um esquema de furto qualificado via Pix, que utilizava malware para controlar celulares e desviar R$ 2 milhões em um dia. A defesa alega prisão inadequada e duplicidade investigativa.
The Shai-Hulud malware campaign is targeting software supply chains, affecting over 320 packages on NPM and PyPI with over 518 million monthly downloads. This campaign highlights the risks of automated systems and the reliance on third-party code in modern development.
North Korean state-affiliated hackers stole over $2 billion in cryptocurrency in 2025, a 51% increase from 2024, targeting Web3 projects and exchanges for anonymous fund transfer, according to CrowdStrike's 2026 report.
OpenAI's internal development environment was breached by hackers using compromised TanStack npm package, affecting employee devices and limited code repositories, but no customer data or production systems were compromised.
Malware repositories vx-underground (30TB) and VirusTotal (31PB) are visualized in terms of stacked hard drives, comparing their heights to landmarks like the Eiffel Tower and Burj Khalifa.
Malware repositories vx-underground (30TB) and VirusTotal (31PB) are compared in scale by hypothetically stacking 1TB hard drives, revealing VirusTotal's data would form a structure nearly as tall as the Burj Khalifa.
MacOS-Nutzer von ChatGPT, Codex und Atlas erhalten eine Malware-Warnung, die auf ein widerrufenes Entwicklerzertifikat nach einem Sicherheitsvorfall bei OpenAI zurückzuführen ist. Aktuelle App-Versionen sind nicht betroffen.
Anfang Mai hat die Webseite von JDownloader Malware ausgeliefert. Das erinnert an die Daemon Tools, die inzwischen reagiert haben.
The identified malware samples are linked to 11 monitored hacker groups
Der Podcast schiebt eine Bonusfolge ein, um von einer interessanten Android-Malware und von wortwörtlich dramatischen Windows-Exploits zu erzählen.
Offiziell signierte Daemon-Tools-Installer von der Herstellerseite bringen Malware mit. Offenbar durch einen Lieferkettenangriff.
Offiziell signierte Daemon-Tools-Installer von der Herstellerseite bringen Malware mit. Offenbar durch einen Lieferkettenangriff.
