بدافزار · اخبار امنیتی

What AI-generated malware looks like under the microscope

۱۴۰۵/۰۸/۱۳ · ۲ ساعت پیش بدافزار Help Net Security

In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from a model, and notes that decompiled code strips much of that away. Kaye also covers how AI is squeezing the time teams have to patch, where it…

BleepingComputer

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

۱۴۰۵/۰۸/۱۳ · ۱۱ ساعت پیش بدافزار BleepingComputer

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

BleepingComputer

Binance says fake job interview led to $6.3 billion crypto heist

۱۴۰۵/۰۸/۱۲ · ۱۳ ساعت پیش بدافزار BleepingComputer

Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal about $6.34 billion in digital assets. [...]

Malwarebytes Labs

A hidden backdoor put 1.3 million TV boxes to work for criminals

۱۴۰۵/۰۸/۱۲ · ۱۹ ساعت پیش بدافزار Malwarebytes Labs

Videostrong planted a backdoor in more than 1.3 million Android set-top boxes and sold criminals access to the resulting botnet.

Security Affairs

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

۱۴۰۵/۰۸/۱۲ · ۲۳ ساعت پیش بدافزار Security Affairs

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that had enrolled more than 1.3 million set-top boxes in a botnet. The result of the investigation into the malware operation is the striking part: […]

WeLiveSecurity

Gorbag: Orcs at the border harvesting intelligence from Ukraine

۱۴۰۵/۰۸/۱۲ · ۲۳ ساعت پیش بدافزار WeLiveSecurity

ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line

Infosecurity Magazine

Police and Tech Firms Team Up to Dismantle XCPE Botnet

۱۴۰۵/۰۸/۱۲ · ۲۳ ساعت پیش بدافزار Infosecurity Magazine

Google and partners have taken down the XCPE botnet attributed to Chinese device maker Videostrong

Security Affairs

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

۱۴۰۵/۰۸/۱۲ · ۱ روز پیش بدافزار Security Affairs

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted by government-backed spyware. The warning follows Apple’s notifications, which began reaching iPhones on October 29, according to the federal cybersecurity office, the BSI. The BSI says members […]

Krebs on Security

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

۱۴۰۵/۰۸/۱۲ · ۱ روز پیش بدافزار Krebs on Security

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised…

The Register

Cops bust botnet of 1.3M infected Android TV boxes

۱۴۰۵/۰۸/۱۱ · ۱ روز پیش بدافزار The Register

Videostrong accused of shipping devices with a backdoor baked in

Security Affairs

VOLTA, the infostealer that asks an AI which victims are worth the effort

۱۴۰۵/۰۸/۱۱ · ۱ روز پیش بدافزار Security Affairs

VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is […]

BleepingComputer

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

۱۴۰۵/۰۸/۱۱ · ۱ روز پیش بدافزار BleepingComputer

Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware to generate revenue through cybercrime activities. [...]

Schneier on Security

Bloatware in Aftermarket Auto Parts

۱۴۰۵/۰۸/۰۸ · ۴ روز پیش بدافزار Schneier on Security

This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware—or spyware, if you’re being less charitable—was a voice assistant equipped with WebView, an Android system component…

Infosecurity Magazine

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

۱۴۰۵/۰۸/۰۷ · ۵ روز پیش بدافزار Infosecurity Magazine

NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries

Infosecurity Magazine

MR ROBOT Malware-as-a-Service Targets Indian Bank Customers

۱۴۰۵/۰۸/۰۷ · ۶ روز پیش بدافزار Infosecurity Magazine

MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data