The phone app developed by startup Dexiga for the casino resort WinStar had an exposed database containing customers’ personal information, including names, phone numbers, email addresses, and home addresses.
Temu is the latest brand chosen by scammers for their phishing scams. Hackers are using Temu’s giveaway rewards to entice users to give away their credentials, with over 800 new domains registered as “Temu” in the last three months.
The malware is spread through deceptive websites impersonating legitimate cryptocurrency platforms, with a noticeable emphasis on targeting Indian cryptocurrency enthusiasts.
RustDoor has various commands to control compromised systems, exfiltrate data, and establish persistence, and it has been distributed under multiple names while remaining undetected for at least three months.
Google is collaborating with the Singapore government to roll out a new security feature in Google Play Protect to block the installation of potentially risky side-loaded apps, aiming to protect Android users from malware-enabled scams.
Two US insurance companies, Washington National Insurance and Bankers Life, have reported that the personal information of around 66,000 individuals may have been stolen by hackers using SIM-swapping attacks.
Brazilian banking trojans have a history of expanding abroad, and the emergence of new variants like “Coyote” could lead to their evolution into fully fledged initial access trojans and backdoors.
The vulnerability affects various versions of FortiOS, and the recommended solution includes upgrading to specific versions or migrating to a fixed release to address the flaw.
While ransomware groups targeted a wide range of industries for profit, the demise of several groups in 2023 was attributed to increased pressure from law enforcement and cybersecurity organizations.
The threat actor maintained long-term access to the victim’s network, evading detection by using living-off-the-land binaries, side-loading backdoors, and leveraging open-source reverse proxy tools like Fast Reverse Proxy (FRP) and Venom.