Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover

The QiAnXin Threat Intelligence Center’s report details sophisticated multi-year zero-day exploit campaigns by APT groups from Northeast Asia targeting desktop and Android devices for espionage. The attacks include the first known in-the-wild exploitation of the ZipperDown vulnerability and demonstrate evolving payloads and techniques for data exfiltration and account hijacking. #ZipperDown #APTactors…

Read More
Data breach at major Swedish software supplier impacts 1.5 million

A cyberattack on Swedish IT systems supplier Miljödata has exposed personal data of 1.5 million people, leading to investigations by authorities and GDPR concerns. The attack involved data theft, Darknet leaks by threat group Datacarry, and affected multiple municipalities, highlighting significant security vulnerabilities. #Miljödata #Datacarry #GDPR #Darknet

Read More
Microsoft removing Defender Application Guard from Office

Microsoft plans to phase out Defender Application Guard from Office by December 2027, replacing it with Protected View for enhanced security. This deprecation aims to streamline security and encourage the use of alternative protection tools like Defender for Endpoint and Windows Defender Application Control. #DefenderApplicationGuard #MicrosoftOffice #ProtectedView

Read More
Malicious Android apps on Google Play downloaded 42 million times

This report highlights a significant increase in malicious Android apps on Google Play, with over 40 million downloads and a 67% rise in mobile malware targeting users. Key threats include spyware, banking trojans, and adware, with attackers shifting toward social engineering tactics like phishing, smishing, and SIM-swapping to exploit mobile payments. #Anatsa #SpyNote

Read More
Europol and Eurojust Dismantle €600 Million Crypto Fraud Network in Global Sweep

Nine individuals were arrested across multiple European countries in an operation targeting a cryptocurrency money laundering scheme that defrauded victims of approximately €600 million. The coordinated effort involved raids, seizures, and investigations into fake investment platforms used for illicit crypto transactions. #CryptoMoneyLaundering #Eurojust…

Read More
A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces

A coalition of cybercrime groups including Scattered Spider, LAPSUS$, and ShinyHunters is actively operating through multiple Telegram channels despite continuous disruptions. These groups engage in data extortion, social engineering, and potential ransomware activities, working under a loose federation known as “The Com.” #ScatteredSpider #LAPSUS$ #ShinyHunters #TheCom…

Read More
Treasury sanctions 8 for laundering North Korea earnings from cybercrime, IT worker scheme

Eight individuals and two companies are sanctioned by the U.S. for their roles in North Korea’s money laundering schemes connected to cybercrime and IT worker fraud. These actions support North Korea’s illicit earnings, including funding its nuclear weapons program, posing global security threats. #NorthKorea #Cybercrime #MoneyLaundering #OFAC #Cryptocurrency…

Read More
Data brokers selling location info that can be used to track EU officials, report finds

European reporters uncovered the ease of accessing location data of European Commission staff through free datasets from brokers, highlighting gaps in Europe’s digital privacy protections. The investigation revealed private details and daily movement patterns of EU officials, raising concerns about data privacy enforcement. #EuropeanCommission #DataBrokers…

Read More
Polish loan platform hacked; mobile payment system and other businesses disrupted

Polish authorities are Investigating a series of cyberattacks affecting major companies, including data breaches and disruption of payment services, highlighting the increasing frequency of cyber threats. The attacks, potentially linked to Russia, underscore the growing cyber warfare and espionage risks faced by Poland and European nations. #SuperGrosz #Blik #RussiaCyberattacks…

Read More