Iran’s Nimbus Manticore Used Trojanized Zoom Installers Against US Firms

Iran’s Nimbus Manticore hackers used trojanized Zoom installers to deploy malware against US firms during a wider IRGC linked cyber campaign.

·

CPR, Cyber Attack, Cyber-Attacks, cybersecurity, Iran, Malware, MiniFast, Nimbus Manticore, SCAM, Security, UNC1549

¶¶¶¶¶

How Can MSSPs Scale Threat Detection Without Burning Out Their Analysts?

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

·

ANY.RUN, cybersecurity, Sandbox, Security, Threat Analysis, Threat Detection, Threat Intelligence

¶¶¶¶¶

Trojanized Gemini and Claude Installers Target Developers Via SEO Poisoning

Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data.

·

Claude, Cyber Attack, cybersecurity, Developers, EclecticIQ, Gemini, Malware, Scams and Fraud, Security, SEO Poisoning, TROJAN

¶¶¶¶¶

Claude Mythos AI Identified 10,000+ Software Vulnerabilities in One Month

Anthropic says its Claude Mythos AI identified more than 10,000 software vulnerabilities in one month, including critical flaws in open-source code.

·

AI, Anthropic, Artificial Intelligence, Claude, cybersecurity, Mythos AI, Project Glasswing, Security, vulnerability

¶¶¶¶¶

FBI Chief Kash Patel’s Clothing Store Hacked in ClickFix Infostealer Attack

Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware.

·

ClickFix, Cloudflare, Cyber Attack, Cyber-Attacks, cybersecurity, FBI, Hacking News, Infostealer, Kash Patel, Malware, Security

¶¶¶¶¶

RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers

Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers.

·

ASUS, Botnet, Cyber Attack, Cyber-Attacks, cybersecurity, IoT, Malware, Mirai, RondoDox, Routers, Security

¶¶¶¶¶

FBI Warns of Kali365 Phishing Service Targeting Microsoft 365 Account

FBI warns of Kali365, a PaaS scam kit that lets cybercriminals bypass MFA and hijack Microsoft 365 accounts without passwords.

·

Cyber Attack, Cyber Crime, cybersecurity, FBI, Fraud, Kali365, Microsoft 365, Phishing, Phishing Kit, Phishing Scam, SCAM, Scams and Fraud, Security

¶¶¶¶¶

5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft.

·

Cyber Attack, Cyber-Attacks, cybersecurity, GitHub, Malware, Megalodon, SafeDep, Security, Supply Chain

¶¶¶¶¶

Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds

Deleted Google API Keys remain active for up to 23 minutes after deletion, exposing GCP, Gemini, BigQuery, and Maps data to attackers.

·

Aikido Security, API, Cloud Security, cybersecurity, Google API Key, Google Cloud, Security, vulnerability

¶¶¶¶¶

Android Malware Spotted Subscribing Victims to Paid Services Without Consent

Cybersecurity researchers expose a 10-month global Android malware campaign using fake apps to secretly charge users through premium SMS bills.

·

Android, Cyber Attack, Cyber Crime, cybersecurity, Fraud, Malware, Privacy, SCAM, Scams and Fraud, Security, Zimperium, zLabs

¶¶¶¶¶

1010.cx

1010.cx

Category: Security