InfoSecBulletin Cybersecurity for mankind
The White Snake malware has been updated to take advantage of a new feature in the latest Google Chrome version. This update lets malware steal CVC codes from credit cards saved in browsers, posing a serious online security threat, according to reports on X.
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
Chrome’s New Feature Draws Attention:
Google Chrome version 129, released on September 17, 2024, added new features for a better user experience.
One such feature is the ability to store CVC codes from credit cards directly within the browser for easier online transactions.
This feature was meant to simplify payments but has unintentionally drawn the attention of cybercriminals and infostealer developers.
White Snake Malware Update:
White Snake has swiftly adapted to this new opportunity. Malware developers have improved their tools to target and extract stored CVC codes from victims’ browsers. This upgrade enables White Snake to collect full credit card information, facilitating fraud and theft for cybercriminals.
White Snake’s use of the new Chrome feature highlights the ongoing struggle between software developers and cybercriminals. Users should be careful when storing sensitive information in browsers and consider using password managers or secure payment platforms instead.
Cybersecurity experts advise users to keep their security software updated and stay alert for any suspicious account activity. Google will fix this vulnerability in future updates, but users should take steps now to protect their financial information.
