BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware

BITTER APT spreads ProSpy and ToSpy via Signal, Google, and Zoom lures, targeting journalists through LinkedIn and iMessage spearphishing.

·

Bitter, Cyber Attack, cybersecurity, Google, Malware, Middle East, ProSpy, Security, Signal, spyware, ToSpy, Zoom

¶¶¶¶¶

OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures

OpenSSF warns hackers impersonate Linux Foundation leaders on Slack, tricking developers into installing malware that can compromise entire systems.

·

Cyber Attack, cybersecurity, Google Workspace, Linux Foundation, Malware, OpenSSF, Phishing, Phishing Scam, SCAM, Scams and Fraud, Security, Slack

¶¶¶¶¶

Why Your Deprecated Endpoints Are an Attacker’s Best Friend: The Rise of Ghost APIs

Ghost APIs are deprecated endpoints left active, exposing systems to attack. Learn how they differ from shadow APIs and why they create hidden security risks

·

API, Cyber Attack, cybersecurity, Data Breach, Ghost API, Security, vulnerability

¶¶¶¶¶

Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand

Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.

·

Bangkok, CaaS, Cyber Crime, cybersecurity, DDOS, Fluxstress, Germany, Malware, Noah Christopher, Ransomware, Security, Thailand

¶¶¶¶¶

Hacker Used Claude Code, GPT-4.1 to Exfiltrate Hundreds of Millions of Mexican Records

A lone hacker used Claude Code and GPT-4.1 to exfiltrate hundreds of millions of Mexican citizen records from 9 government agencies.

·

AI, Artificial Intelligence, ChatGPT, Claude, Claude Code, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breaches, Mexico, OpenAI, Security

¶¶¶¶¶

FBI Recovers Deleted Signal Messages Through iPhone Notifications

Signal messages may persist in iPhone notification data, enabling FBI access even after deletion, a court case reveals.

·

Cellebrite, cybersecurity, Encryption, FBI, iphone, Lynette Sharp, Privacy, Security, Signal, Surveillance, Technology, vulnerability

¶¶¶¶¶

Google Chrome Update Disrupts Infostealer Cookie Theft

Google adds Device Bound Session Credentials (DBSC) to Chrome 146, using hardware keys to block infostealer use of stolen session cookies on Windows.

·

Chrome, Cookie, cybersecurity, DBSC, Google, Infostealer, Malware, Security

¶¶¶¶¶

ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot

ShinyHunters claims access to Rockstar Games Snowflake data via Anodot breach, threatening a data leak on April 14 if ransom demands are not met.

·

Anodot, Cyber Attack, Cyber Crime, Cyber-Attacks, Data Breach, Data Breaches, gaming, Grand Theft Auto VI, GTA 6, Rockstar Games, Salesforce, Security, ShinyHunters, Snowflake

¶¶¶¶¶

Android Banking Trojan Linked to Cambodia Scam Compounds Hits 21 Countries

Android banking trojan linked to Cambodia scam compounds uses forced labour to target users in 21 countries, bypassing security to steal funds.

·

Android, Banking, Cambodia, Chong Lua Dao, Cyber Crime, cybersecurity, Infoblox, K99 Triumph City, Malware, Security, TROJAN, trojon

¶¶¶¶¶

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware.

·

Blockchain, Cyber Attack, Cyber Crime, cybersecurity, Florida, GraphAlgo, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

1010.cx

1010.cx

Category: Security