Tag: malware delivery
8 articles
Researchers Expose Flaw in ChatGPT Lockdown Mode
A newly discovered security flaw in ChatGPT's Lockdown Mode could allow hackers to steal sensitive chat data, launch phishing attacks, and deliver malware - including through zero-click data exfiltration in the desktop app. This alarming vulnerability raises serious concerns about the safety of your online conversations.
Lazarus Hackers Deploy Post-Quantum Encryption for Malware Delivery
The Lazarus hackers are taking malware delivery to the next level by using post-quantum encryption, a cutting-edge technique that makes it extremely difficult to detect their malicious activities. By embedding ML-KEM-1024, a NIST-approved mechanism, into their malware, they're future-proofing their attacks against even the most advanced security systems.
Hackers Deploy ROMULUS Platform to Deliver Malware via ClickFix Lures
Meet ROMULUS, a sneaky malware delivery platform that's tricking users into running malicious commands via fake landing pages and ClickFix-style lures. This commercial cybercriminal service is behind the distribution of nasty malware, including Legion Loader.
Hackers Breach AOMEI Servers to Spread Malware via Software Updates
In a shocking 21-minute window, hackers hijacked AOMEI's update system not once, not twice, but three times, using the company's own mechanism against it to spread malware to customers worldwide. They manipulated two critical configuration files that controlled update and notification behavior, turning a trusted source into a malicious one.
MacOS Malware Exploits Legitimate Developer ID to Steal Login Credentials
Researchers at Jamf Threat Labs uncovered a sneaky new macOS malware, dubbed CrashStealer, that uses a clever disguise to steal sensitive login credentials and other personal data. This cunning malware masquerades as a legitimate Apple component to quietly harvest its victims' information.
Cybercriminals Exploit ClickFix to Deliver Malware
Don't assume macOS is safe from cyber threats - a recent report warns that it now requires the same level of monitoring and protection as Windows to prevent malware attacks. Cybercriminals are using the ClickFix technique to deliver malware, tricking victims into running malicious commands.
Cybercriminals Exploit AI Hype in Social Engineering Attacks
Cybercriminals are cleverly exploiting our curiosity about AI to launch sophisticated social engineering attacks, using trusted AI names and urgent lures to trick victims into divulging sensitive info or downloading malware. By tapping into our desire to stay ahead of the curve, attackers are able to bypass our usual caution and catch us off guard.
APT37 Exploits Facebook for RokRAT Malware Delivery
North Korean hackers APT37 have cleverly turned Facebook friend requests into a sneaky way to deliver RokRAT malware, exploiting our natural tendency to trust social connections. By accepting a friend request, victims unwittingly open the door to a remote access trojan that can compromise their device.