A series of cybersecurity threats have been identified across multiple platforms and devices. Researchers at Fortinet uncovered a phishing campaign distributing UpCryptor malware through carefully crafted emails linked to convincing phishing pages. On Android, 77 malicious apps infected with malware have been downloaded 19 million times from Google Play Store, targeting 831 banks worldwide. The HOOK Android Trojan has evolved to include ransomware overlays and now supports 107 remote commands, locking devices with ransomware-style attacks. Additionally, a new attack called ShadowCaptcha exploits over 100 compromised WordPress sites to deliver info-stealers, ransomware, and cryptocurrency miners by tricking users into pasting clipboard content. Supply chain manufacturers in the U.S. are being targeted by MixShell, a stealth malware delivered via hijacked “Contact Us” forms. Mac users face threats from Shamos malware, which steals sensitive data through deceptive "ClickFix" attacks. Security firm ESET discovered a novel ransomware variant that employs a local AI model to generate malicious scripts, making it more difficult to detect than traditional malware. Another attack, Sni5Gect, can crash phones and downgrade 5G connections to 4G without requiring a rogue base station. These developments highlight an increasing sophistication in malware tactics affecting various operating systems and sectors.
Security firm ESET has discovered a new type of ransomware that uses a local AI model to generate malicious scripts and perform other illicit activities. Because of the variance of LLM output, this malware is harder to track than traditional attacks. https://t.co/DmwoXiL2oN
.@Fortinet researchers discovered a new fast-spreading phishing campaign leveraging carefully crafted emails to deliver URLs packed with the UpCryptor malware linked to convincing phishing pages. #cybersecurity #infosec #ITsecurity https://t.co/eF4S1BzTOn
Hook Android Trojan Now Delivers Ransomware-Style Attacks: https://t.co/LM0ZE38HWj by darkreading #infosec #cybersecurity #technology #news