Cybersecurity

Facebook takes down Brazil environmental disinformation network with ties to military

Facebook owner Meta Platforms (FB.O) said on Thursday it had removed a network of social media accounts with ties to the Brazilian military that posed as fake nonprofits to play down the dangers of deforestation. Although the individuals involved in the network were active…

Facebook says Ukraine military accounts were hacked to post calls for surrender

Facebook today reported an increase in attacks on accounts run by Ukraine military personnel. In some cases, attackers took over accounts and posted "videos calling on the Army to surrender," but Facebook said it blocked sharing of the videos. Specifically, Facebook…

First Malware Targeting AWS Lambda Serverless Platform Discovered

A first-of-its-kind malware targeting Amazon Web Services' (AWS) Lambda serverless computing platform has been discovered in the wild. Dubbed "Denonia" after the name of the domain it communicates with, "the malware uses newer address resolution techniques for…

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. "This malware implements a…

Hackers use malicious apps to target customers of 8 Malaysian banks, researchers say

Researchers at Slovak security firm ESET said they have found that three malicious Android apps are still targeting the customers of eight different Malaysian banks in a campaign that began late last year. ESET researcher Lukáš Štefanko told The Record that they don’t have…

North Carolina A&T hit with ransomware after ALPHV attack

North Carolina A&T University has become the latest school hit with ransomware in 2022. The largest historically black college or university (HBCU) showed up on the ransomware victim site of the ALPHV/Black Cat group on Wednesday after they released a public…

Malicious web redirect service infects 16,500 sites to push malware

A new traffic direction system (TDS) called Parrot is relying on servers that host 16,500 websites of universities, local governments, adult content platforms, and personal blogs. Parrot's use is for malicious campaigns to redirect potential victims matching a specific…

Android apps with 45 million installs used data harvesting SDK

Mobile malware analysts warn about a set of applications available on the Google Play Store, which collected sensitive user data from over 45 million installs of the apps. The apps collected this data through a third-party SDK that includes the ability to capture clipboard…

FIN7 hacking group 'pen tester' sentenced to 5 years in prison

Denys Iarmak, a Ukrainian member and a "pen tester for the FIN7 financially-motivated hacking group, was sentenced on Thursday to 5 years in prison for breaching victims' networks and stealing credit card information for roughly two years, between November 2016…

New malware targets serverless AWS Lambda with cryptominers

Security researchers have discovered the first malware specifically developed to target Amazon Web Services (AWS) Lambda cloud environments with cryptominers. AWS Lambda is a serverless computing platform for running code from hundreds of AWS services and software…