Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious Interview campaign. The defining aspect of the attack is that bogus macOS software update screen stealthily
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Giulia

Giulia

1d ago
0 0

Discussion

Start the conversation

Your voice can be the first to spark an engaging conversation.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Friday Squid Blogging: Squid Helps Discover New Marine Species

The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid,…
SS

Schneier on Security

2h ago
0
bleepingcomputer.com
Amgen says cloud data breach exposed patient health, proprietar…

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems o…
Giulia

Giulia

2h ago
0
thehackernews.com
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without Us…

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform…
alex but tired

alex but tired

2h ago
0
thehackernews.com
Suspected Chinese-Speaking Hackers Target Central Asian Governm…

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, incl…
MB

Maria Bakker

13h ago
0
darkreading.com
CISA Issues Fresh SBOM Guidance. Did They Get It Right?

A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
DR

Dark Reading

15h ago
0
schneier.com
American Being Prosecuted for Wiping His Phone Before Handing I…

He’s being prosecuted for giving border officials a code that wiped his phone: The case centers on a feature included in GrapheneOS, a custom Android ope…
SS

Schneier on Security

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without Us…

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform…
alex but tired

alex but tired

2h ago
0
thehackernews.com
Suspected Chinese-Speaking Hackers Target Central Asian Governm…

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, incl…
MB

Maria Bakker

13h ago
0
thehackernews.com
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Acce…

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, thi…
TN

The Hacker News

2d ago
0
thehackernews.com
Critical Rails Flaw Could Let Unauthenticated Attackers Read Se…

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application ser…
TN

The Hacker News

2d ago
0
thehackernews.com
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and …

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex,…
TN

The Hacker News

2d ago
0
thehackernews.com
Flying Eagle Android RAT Traces Found on 170 Servers as Source …

Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt. io and independent resea…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest