Two former US Air Force members have been sentenced to a combined 189 months in federal prison for their roles in a series of business email compromise (BEC) scams and phishing campaigns. Chijioke Timothy Odimegwu and Harafat Mogaji, both stationed at Dover Air Force Base in Delaware, used spoofed email addresses and stolen employee credentials … Read more
A malicious campaign has been uncovered, using custom variants of OpenAI’s popular chatbot platform, ChatGPT, to deploy remote access trojans (RAT) malware. The threat actors are exploiting the legitimate feature in ChatGPT that allows users to create custom versions of the AI for specific tasks, and hosting these malicious models on Google Sites. The attackers … Read more
Signal’s Secure Backup Feature Now Available Across All Supported Platforms Signal, the popular secure messaging app, has completed the rollout of its secure backups feature across all supported operating systems. This means that users can now create end-to-end encrypted backups of their chats and restore them on other devices if they lose their phone. The … Read more
The FBI is cracking down on the notorious ShinyHunters extortion group, warning its remaining members to turn themselves in after a key suspect was arrested by Dutch authorities. This development marks a significant milestone in the ongoing battle against cybercrime, and it’s essential for organizations and individuals alike to understand what’s at stake. ShinyHunters has … Read more
Malicious Custom ChatGPTs Spread ClickFix Attacks, Delivering RAT Malware to Unsuspecting Users A new wave of cyber threats has emerged in the form of custom ChatGPT variants, which are being used to launch sophisticated attacks against unsuspecting users. These malicious versions of OpenAI’s popular AI platform have been promoted through sponsored Google results and are … Read more
Signal’s latest update brings a major boost to user security and convenience, rolling out encrypted local backup support to all supported platforms. This significant feature expansion marks a crucial milestone in Signal’s ongoing quest for end-to-end encryption (E2EE) dominance. The secure messaging app has been gradually introducing its backup system across various operating systems since … Read more
Russian Cyber Group Targets Over 100 Organizations with Sophisticated Phishing Campaign A sophisticated phishing campaign, dubbed “Star Blizzard,” has been uncovered, with evidence pointing to a Russian cyber group behind the operation. The attackers have sent fake event invitations to more than 100 organizations, primarily in the US and Europe, aiming to install a backdoor … Read more
A devastating data breach has left thousands of French taxpayers vulnerable, after hackers exploited stolen staff passwords to gain access to sensitive tax information. The shocking revelation comes as a stark reminder that even with robust security measures in place, human error can be the most significant vulnerability of all. The incident occurred when an … Read more
Cyberattackers have been exploiting a previously unknown vulnerability in Citrix NetScaler appliances to gain root access, steal sensitive information, and spread malware within organizations. The attacks, which began at least by early September, have impacted companies across various sectors, including government, finance, education, law, and professional services, in North America and Europe. The vulnerability, designated … Read more
The FBI has issued a stern warning to members of the notorious ShinyHunters extortion group, urging them to turn themselves in following the recent arrest of one of their alleged leaders. The move comes as part of a widening investigation into the group’s activities, which have seen them breach over 140 organizations worldwide and extort … Read more