InfoSecBulletin Cybersecurity for mankind
An Android malware campaign that targets banks has upgraded its capabilities and added more ways to avoid detection.
A new report from Zimperium found over 200 harmful apps related to a malicious operation. The report also mentions that the threat actor has been carrying out phishing attacks on financial institutions.
CVE-2024-51503
Trend Micro released updates for Deep Security Agent RCE
Apple Releases Patch for two Actively Exploited Zero-Day
Maxar Space Data Leak, Company admit, Investigation ongoing!
GitHub CLI Vulnerability Could Allow RCE
“Sarcoma” ransomware group
Hacker to disclose “Popular Life Insurance” 36 GB of stolen data
BugHunt 2024: A Milestone Cyber security Competition held at Dhaka
TP-Link DHCP Vulnerability Allow Attackers Takeover Routers Remotely
WSJ reports
T-Mobile hacked in massive breach of telecom networks
Palo Alto Networks Confirms critical RCE zero-day actively exploited
CISA, FBI Warns
Hacker compromised multiple teleco network at US
ALSO READ:
The campaign was discovered in July 2023 by Sophos. They found 40 apps that were stealing information from customers of 4 Iranian banks.
The primary goal of the bogus apps is to trick victims into granting them extensive permissions as well as harvest banking login credentials and credit card details by abusing Android’s accessibility services.
“The corresponding legitimate versions of the malicious apps are available at Cafe Bazaar, an Iranian Android marketplace, and have millions of downloads,” Sophos researcher Pankaj Kohli said at the time.
“The malicious imitations, on the other hand, were available to download from a large number of relatively new domains, some of which the threat actors also employed as C2 servers.”
“Some of these domains were found to serve HTML phishing pages aimed at extracting credentials from mobile users.” To read the full report click here.
