Venezuelan Cartel’s Malware Honcho Nabbed for ATM Jackpotting

Venezuelan Cartel’s Malware Expert Brought Down for ATM Heists In a significant blow to transnational cybercrime, US authorities have arrested and arraigned Anibal Alexander Canelon Aguirre, a 50-year-old Venezuelan member of the notorious Tren de Aragua (TdA) cartel. Canelon Aguirre is accused of masterminding a sophisticated “jackpotting” scheme that compromised ATMs with malware, causing them … Read more

‘AgentCorruption’ Puts AWS Environments At Risk With Single Prompt

AWS Environments Left Exposed by AI-Driven Vulnerability A recently patched vulnerability in Amazon Web Services’ (AWS) Bedrock AgentCore has left organizations using the platform at risk of a full-scale takeover. Researchers from Zenity Labs discovered that an attacker could use a single prompt to a public-facing chatbot to gain control over an entire fleet of … Read more

FakeGit malware campaign returns with 17,610 malicious GitHub repos

The FakeGit malware campaign has made a comeback, with over 17,610 malicious repositories on GitHub distributing the SmartLoader malware. This resurgence marks a significant increase in activity, with the operators pushing out nearly 13,000 new repos in just 34 hours. Researchers at Apiiro, a software supply-chain security platform, have been tracking this operation and report … Read more

FBI disrupts Chinese hacking tools used to breach critical infrastructure

FBI Disrupts Chinese Hacking Tools Used to Breach Critical Infrastructure Worldwide The Federal Bureau of Investigation (FBI) has made a significant breakthrough in disrupting two Chinese state-sponsored hacking tools used to breach critical infrastructure and organizations globally. The FBI seized seven domains, including those supporting the MicroScan and FishHub platforms, allegedly operated by China-based Integrity … Read more

Low-cost Android phones ship with residential proxy malware

Low-cost Android phones found to ship with residential proxy malware, threatening user data and online security. A disturbing trend has emerged in the world of low-cost Android smartphones. Researchers at Bitdefender have discovered that thousands of devices across 150 countries are being shipped with malicious software embedded directly into their firmware. Dubbed “Midnight Mimosa,” this … Read more

Ransomware attack disrupts Japan’s IDCF Cloud used by govt clients

A Devastating Ransomware Attack Hits Japan’s IDCF Cloud, Disrupting Government Clients and Private Companies Alike In a major cybersecurity incident, Japanese cloud infrastructure provider IDCF Cloud has fallen victim to a ransomware attack that has brought its operations in one of its data center clusters to a grinding halt. The company, which serves over 495 … Read more

FBI disrupts Chinese hacking tools used to breach critical infrastructure

**FBI Shuts Down Chinese Hacking Tools Used to Breach Critical Infrastructure Worldwide** The FBI has disrupted two high-tech hacking tools used by a group of Chinese state-sponsored hackers to breach critical infrastructure and other organizations globally. The move marks a significant blow against the cyber threat landscape, highlighting the ongoing cat-and-mouse game between nation-state actors … Read more

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

A Devastating Chain of Events: Ransomware Affiliate Betrayal Exposes Vulnerabilities in Global Networks In a shocking turn of events, a trusted affiliate of a notorious ransomware group has been caught betraying their partners and exploiting vulnerabilities in global networks. This treacherous act has not only compromised sensitive data but also exposed the weaknesses in our … Read more

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

China-Linked Hackers Exposed Thousands of Emails Through Compromised Portal, FBI Warns The FBI has issued a warning that thousands of stolen emails have been made accessible through a portal controlled by China-linked hackers. This compromised platform has allowed third-party actors to gain unauthorized access to sensitive information, exacerbating the threat posed by identity exposure. The … Read more

Low-cost Android phones ship with residential proxy malware

A widespread malware campaign has been uncovered on low-cost Android smartphones, compromising thousands of devices worldwide. Dubbed “Midnight Mimosa,” this insidious threat embeds malicious software into the firmware of vulnerable phones, giving attackers unfettered access to sensitive information and system-level privileges. The malware is believed to have been introduced somewhere in the device supply chain, … Read more