InfoSecBulletin Cybersecurity for mankind
The White Snake malware has been updated to take advantage of a new feature in the latest Google Chrome version. This update lets malware steal CVC codes from credit cards saved in browsers, posing a serious online security threat, according to reports on X.
Meta fined $101 million for storing passwords in plaintext
Microsoft warns Storm-0501 targets hybrid cloud environments
RCE flaw impacts all GNU/Linux System: Details Revealed
Octo2: European Banks Already Under Attack by New Malware varient
CISA Releases Guideline mitigating Active Directory compromise
G7 cyber group warns to prep for quantum computing risks
Cloudflare report
India linked hacker to target Bangladeshi Gov.t and law agency
India launches first Al-powered network solution for spam detection
White Snake to Steal Credit Cards CVC Codes from Chrome
Kaspersky Automatically Replaces With UltraAV, Raising Concerns
Chrome’s New Feature Draws Attention:
Google Chrome version 129, released on September 17, 2024, added new features for a better user experience.
One such feature is the ability to store CVC codes from credit cards directly within the browser for easier online transactions.
This feature was meant to simplify payments but has unintentionally drawn the attention of cybercriminals and infostealer developers.
White Snake Malware Update:
White Snake has swiftly adapted to this new opportunity. Malware developers have improved their tools to target and extract stored CVC codes from victims’ browsers. This upgrade enables White Snake to collect full credit card information, facilitating fraud and theft for cybercriminals.
White Snake’s use of the new Chrome feature highlights the ongoing struggle between software developers and cybercriminals. Users should be careful when storing sensitive information in browsers and consider using password managers or secure payment platforms instead.
Cybersecurity experts advise users to keep their security software updated and stay alert for any suspicious account activity. Google will fix this vulnerability in future updates, but users should take steps now to protect their financial information.
