February 2024 – Page 5

Fraudsters tried to scam Apple out of 5,000 iPhones worth over $3 million

Two Chinese nationals face 20 years in prison after being caught and convicted of submitting over 5,000 fake iPhones worth more than $3 million to Apple with the goal of having them replaced with genuine devices. […]

21 Feb

New SSH-Snake malware steals SSH keys to spread across the network

A threat actor is using an open-source network mapping tool named SSH-Snake to look for private keys undetected and move laterally on the victim infrastructure. […]

20 Feb

VMware urges admins to remove deprecated, vulnerable auth plug-in

VMware urged admins today to remove a discontinued authentication plugin exposed to authentication relay and session hijack attacks in Windows domain environments via two security vulnerabilities left unpatched. […]

20 Feb

VoltSchemer attacks use wireless chargers to inject voice commands, fry phones

A team of academic researchers show that a new set of attacks called ‘VoltSchemer’ can inject voice commands to manipulate a smartphone’s voice assistant through the magnetic field emitted by an off-the-shelf wireless charger. […]

20 Feb

New Migo malware disables protection features on Redis servers

Security researchers discovered a new campaign that targets Redis servers on Linux hosts using a piece of malware called ‘Migo’ to mine for cryptocurrency. […]

20 Feb

Signal rolls out usernames that let you hide your phone number

End-to-end encrypted messaging app Signal finally allows users to pick custom usernames to connect with others while protecting their phone number privacy. […]

20 Feb

ConnectWise urges ScreenConnect admins to patch critical RCE flaw

ConnectWise warned customers to patch their ScreenConnect servers immediately against a maximum severity flaw that can be used in remote code execution (RCE) attacks. […]

19 Feb

LockBit ransomware disrupted by global police operation

Law enforcement agencies from 11 countries have disrupted the notorious LockBit ransomware operation in a joint operation known as ”Operation Cronos.” […]

19 Feb

North Korean hackers linked to defense sector supply-chain attack

In an advisory today Germany’s federal intelligence agency (BfV) and South Korea’s National Intelligence Service (NIS) warn of an ongoing cyber-espionage operation targeting the global defense sector on behalf of the North Korean government. […]

19 Feb

Cactus ransomware claim to steal 1.5TB of Schneider Electric data

The Cactus ransomware gang claims they stole 1.5TB of data from Schneider Electric after breaching the company’s network last month. […]

Month: February 2024

Fraudsters tried to scam Apple out of 5,000 iPhones worth over $3 million

New SSH-Snake malware steals SSH keys to spread across the network

VMware urges admins to remove deprecated, vulnerable auth plug-in

VoltSchemer attacks use wireless chargers to inject voice commands, fry phones

New Migo malware disables protection features on Redis servers

Signal rolls out usernames that let you hide your phone number

ConnectWise urges ScreenConnect admins to patch critical RCE flaw

LockBit ransomware disrupted by global police operation

North Korean hackers linked to defense sector supply-chain attack

Cactus ransomware claim to steal 1.5TB of Schneider Electric data