1+ day, 9+ hour ago   (310+ words) Revolut disclosed personal and financial information of customers after receiving fraudulent information requests sent from an email account hosted on a legitimate government agency domain. The fintech company says its systems and customer funds were not compromised. Blockchain investigator ZachXBT…...

1+ week, 5+ day ago   (482+ words) Socket’s Threat Research Team uncovered the packages on Packagist, where they were disguised as themes for OphimCMS and KKPhim, two Laravel-based content management systems used by Vietnamese movie and comic streaming websites. The malicious themes were published across five Packagist…...

3+ week, 3+ day ago   (333+ words) Android malware is spreading through the built-in firmware update mechanism of automotive head units, turning the devices into nodes for ad fraud and a residential proxy botnet. Kaspersky reports this is the first documented malware campaign with an infection chain…...

3+ week, 4+ day ago   (267+ words) Socket researchers have uncovered a network of 77 Firefox extensions tied to cryptocurrency wallet theft, credential harvesting, and deceptive software distribution. Of those, 40 were confirmed malicious, while another 37 disguised sports-score applications as unrelated browser utilities and appear connected to the same…...

3+ week, 5+ day ago   (342+ words) A large-scale malware operation dubbed StopAndProtect uses thousands of compromised WordPress websites to distribute malware, issue commands, and store data stolen from infected computers. The campaign combines ransomware, credential theft, surveillance, lateral movement, and hands-on data collection, with logs revealing…...