Zerodium Spikes Payout for Zero-Click Outlook Zero-Days
The sweetened deal came on the same day that Trustwave SpiderLabs published a new way to bypass Outlook security to deliver malicious links to victims.
Malware
Conti, DeadBolt Ransomwares Target Delta, QNAP
QNAP had to push out an unexpected (and not entirely welcome) NAS device update, and Delta Electronics’ network has been crippled.
2FA App Loaded with Banking Trojan Infests 10K Victims via Google Play
The Vultur trojan steals bank credentials but asks for permissions to do far more damage down the line.
The malware had already put millions of routers and IoT devices at risk, and now any noob can have at it.
Attackers increasingly are spoofing the courier DHL and using socially engineered messages related to packages to trick users into downloading Trickbot and other malicious payloads.
The malware has added an anti-debugging tool that crashes browser tabs when researchers use code beautifying for analysis.
iOS 15.3 & iPadOS 15.3 fix the Safari browser flaw that could have spilled users’ browsing data, plus a zero day IOMobileFrameBuffer bug exploited in the wild.
Need a blueprint for architecting a formidable cyber-defense? Kerry Matre, senior director at Mandiant, shares hers in this detailed breakdown.
Attackers are getting creative, using smishing & a malicious Google Play QR reader to plant banking trojans on the phones of victims across the globe.
Visitors who shopped on the company’s eCommerce website in January will likely find their payment-card data heisted, researchers warned.
