Cyber Crime

The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attackThe popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack

The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack

The xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack aimed at stealing users' private keys. Threat actors…

1 month ago
Chinese Cybercriminals Released Z-NFC Tool for Payment FraudChinese Cybercriminals Released Z-NFC Tool for Payment Fraud

Chinese Cybercriminals Released Z-NFC Tool for Payment Fraud

Cybercriminals leverage NFC fraud against ATMs and POS terminals, stealing money from consumers at scale. Resecurity (USA) investigated multiple incidents…

1 month ago
Japan ’s FSA warns of unauthorized trades via stolen credentials from fake security firms’ sitesJapan ’s FSA warns of unauthorized trades via stolen credentials from fake security firms’ sites

Japan ’s FSA warns of unauthorized trades via stolen credentials from fake security firms’ sites

Japan ’s Financial Services Agency (FSA) warns of hundreds of millions in unauthorized trades linked to hacked brokerage accounts. Japan…

1 month ago
New sophisticated malware SuperCard X targets Androids via NFC relay attacksNew sophisticated malware SuperCard X targets Androids via NFC relay attacks

New sophisticated malware SuperCard X targets Androids via NFC relay attacks

‘SuperCard X’ - a new MaaS - targets Androids via NFC relay attacks, enabling fraudulent POS and ATM transactions with…

1 month ago
Security Affairs newsletter Round 520 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs newsletter Round 520 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 520 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free…

2 months ago
Node.js malvertising campaign targets crypto users<gwmw style="display: none; background-color: transparent;"></gwmw>Node.js malvertising campaign targets crypto users<gwmw style="display: none; background-color: transparent;"></gwmw>

Node.js malvertising campaign targets crypto users<gwmw style="display: none; background-color: transparent;"></gwmw>

Microsoft warns of a malvertising campaign using Node.js to deliver info-stealing malware via fake crypto trading sites like Binance and…

2 months ago
Chinese Android phones shipped with malware-laced WhatsApp, Telegram appsChinese Android phones shipped with malware-laced WhatsApp, Telegram apps

Chinese Android phones shipped with malware-laced WhatsApp, Telegram apps

Cheap Chinese Android phones ship with trojanized WhatsApp and Telegram clones hiding crypto clippers, active since June 2024. Since June…

2 months ago
Government contractor Conduent disclosed a data breachGovernment contractor Conduent disclosed a data breach

Government contractor Conduent disclosed a data breach

The business services provider Conduent told the SEC a January cyberattack exposed personal data, including names and Social Security numbers.…

2 months ago
Hertz disclosed a data breach following 2024 Cleo zero-day attackHertz disclosed a data breach following 2024 Cleo zero-day attack

Hertz disclosed a data breach following 2024 Cleo zero-day attack

Hertz Corporation disclosed a data breach after customer data was stolen via Cleo zero-day exploits in late 2024, affecting Hertz,…

2 months ago
New malware ‘ResolverRAT’ targets healthcare, pharmaceutical firmsNew malware ‘ResolverRAT’ targets healthcare, pharmaceutical firms

New malware ‘ResolverRAT’ targets healthcare, pharmaceutical firms

New malware ‘ResolverRAT’ is targeting healthcare and pharmaceutical firms, using advanced capabilities to steal sensitive data. Morphisec researchers discovered a…

2 months ago