Lazarus group uses fake cryptocurrency apps to plant AppleJeus malware

Categories: News

Categories: Threats

Tags: Lazarus

Tags: APT38

Tags: AppleJeus

Tags: sideloading

Tags: BloxHolder

Researchers have found a new Lazarus campaign, once again targeting cryptocurrency users and organizations by deploying a fake website and malicious documents.

(Read more…)

The post Lazarus group uses fake cryptocurrency apps to plant AppleJeus malware appeared first on Malwarebytes Labs.

Read more

Watch out for this triple threat PayPal phish

Categories: News

Tags: PayPal

Tags: scam

Tags: phish

Tags: phishing

Tags: fraud

Tags: email

Tags: telephone

Tags: call

Tags: send money

Tags: notification

We take a look at a PayPal phish which comes complete with multiple ways to pull the wool over your eyes.

(Read more…)

The post Watch out for this triple threat PayPal phish appeared first on Malwarebytes Labs.

Read more

Hive Social pulls the plug on itself after security flaws found

Categories: News

Tags: Hive social

Tags: app

Tags: mobile

Tags: social media

Tags: socmed

Tags: mastodon

Tags: twitter

Tags: security

Hive was taken offline last Wednesday, after researchers found security issues which could have had major ramifications for service users.

(Read more…)

The post Hive Social pulls the plug on itself after security flaws found appeared first on Malwarebytes Labs.

Read more

Update now! Emergency fix for Google Chrome’s V8 JavaScript engine zero-day flaw released

Categories: Exploits and vulnerabilities

Categories: News

Tags: V8

Tags: V8 JavaScript Engine

Tags: Google Chrome

Tags: Chrome

Tags: CVE-2022-4262

Tags: 108.0.5359.94

Tags: 108.0.5359.95

Tags: Chrome V8 flaw

Tags: type confusion

Google has rolled out an out-of-band patch for an actively exploited zero-day vulnerability in its V8 JavaScript engine. Make sure you’re using the latest version.

(Read more…)

The post Update now! Emergency fix for Google Chrome’s V8 JavaScript engine zero-day flaw released appeared first on Malwarebytes Labs.

Read more

Snapchat gives Californians more power over their personal data

Categories: News

Categories: Privacy

Tags: Snapchat

Tags: California Privacy Rights Act

Tags: CPRA

Tags: privacy compliance

Tags: California Privacy Choices

Tags: Proposition 24

Snapchat will be rolling out a privacy feature that will allow it to comply with the California Privacy Rights Act

(Read more…)

The post Snapchat gives Californians more power over their personal data appeared first on Malwarebytes Labs.

Read more

Security advisories are falling short. Here’s why, with Dustin Childs: Lock and Code S03E25

Categories: Podcast

This week on Lock and Code, we explore why security advisories—which businesses rely on to inform them about security patches—are falling short of their intended goals.

(Read more…)

The post Security advisories are falling short. Here’s why, with Dustin Childs: Lock and Code S03E25 appeared first on Malwarebytes Labs.

Read more

Eufy “no cloud” security cameras streaming data to the cloud

Categories: News

Tags: eufy

Tags: doorbell

Tags: security system

Tags: cctv

Tags: camera

Tags: thumbnail

Tags: storage

Tags: data

Tags: cloud

Tags: local

Tags: locally

We take a look at what happens when your doorbell camera data pays a visit to the cloud, despite that not being something which is supposed to happen.

(Read more…)

The post Eufy “no cloud” security cameras streaming data to the cloud appeared first on Malwarebytes Labs.

Read more

A week in security (November 28 – December 4)

Categories: News

Tags: week in security

Tags: iSpoof

Tags: Cyber Monday threats

Tags: TikTok malware

Tags: TikTok

Tags: MDR

Tags: fake Friendster

Tags: South Dakota

Tags: Cuba ransomware

Tags: ransomware

Tags: FCC

The most interesting security related news from the week of November 28 to December 4.

(Read more…)

The post A week in security (November 28 – December 4) appeared first on Malwarebytes Labs.

Read more