DevilNFC Malware Traps Android Users in NFC Relay Attacks

A newly identified Android malware family named DevilNFC is raising concern among cybersecurity researchers for its advanced use of kiosk mode to trap victims during NFC relay attacks. These malware families mark a significant evolution in NFC relay th…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

Hackers Exploit MSHTA to Deploy LummaStealer and Amatera Malware

Hackers are increasingly abusing the legacy Microsoft HTML Application Host (MSHTA) utility to deliver commodity malware such as LummaStealer and Amatera. Despite being tied to Internet Explorer, which was retired in 2022, MSHTA remains default in Wind…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

VoidStealer Malware Targets Chrome Data Despite Built-In Browser Protections

A newly discovered infostealer called VoidStealer is raising concerns after researchers revealed it can bypass Google Chrome’s App-Bound Encryption (ABE), a security feature designed to protect sensitive browser data. The malware introduces a novel tec…

·

Chrome, cyber security, Cyber Security News, Malware, vulnerability

¶¶¶¶¶

UAC-0184 Uses Bitsadmin and HTA Files to Deliver Gated Malware

UAC-0184 uses a multi‑stage malware chain that abuses bitsadmin and HTA loaders to reach a heavily obfuscated payload bundle, ultimately hiding behind signed binaries such as VSLauncher.exe and PassMark Endpoint to gain stealthy network access on Ukrai…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

macOS Malware Abuses Fake Google Update for Persistence

A newly observed variant of the SHub macOS infostealer, dubbed “Reaper,” is expanding its capabilities with stealthier delivery, enhanced data theft, and a persistence mechanism disguised as a legitimate Google software update. The Reaper variant conti…

·

cyber security, Cyber Security News, Google, macOS, Malware

¶¶¶¶¶

Operation Ramz Dismantles 53 Servers Used in Scam and Malware Campaigns

A large-scale international cybercrime operation led by INTERPOL has resulted in 201 arrests and the takedown of 53 malicious servers linked to phishing, malware, and online scam campaigns across the Middle East and North Africa (MENA) region. Dubbed&#…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

JavaScript Malware Campaign Drops Crypto Clipper via PowerShell

A large-scale CountLoader campaign that uses layered obfuscation, multi-stage payload delivery, and covert command-and-control (C2) communication to deploy cryptocurrency clipper malware. The campaign stands out for its complex infection chain, combini…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords

The newly discovered Reaper malware bypasses Apple’s macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor.

·

AMOS, Apple, Atomic Stealer, Cyber Attack, cybersecurity, macOS, Malware, Reaper, Security

¶¶¶¶¶

Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign

Government Backed Hackers abused Cloudflare storage services in a Malaysian espionage campaign involving hidden C2 systems and data exfiltration.

·

Cloudflare, Cyber Attack, Cyber Espionage, Cyber-Attacks, cybersecurity, Malaysia, Malware, Oasis Security, Phishing, Privacy, Security, Spying

¶¶¶¶¶

OtterCookie Malware Steals Dev Secrets, SSH Keys, Cloud Credentials, and Tokens

A newly analyzed malware strain, OtterCookie, is emerging as a serious threat to developers, quietly harvesting sensitive data from active workstations in real time. Unlike earlier assumptions, OtterCookie is not a variant of BeaverTail but a separate …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware