7+ hour, 11+ min ago   (85+ words) Zimperium In a story recently reported by Dark Reading, Crowdstrike researchers found that device code phishing and voice phishing (vishing) attacks have more than doubled as cybercriminals increasingly combine phone calls with mobile authentication workflows to trick users into approving…...

1+ day, 7+ hour ago   (676+ words) Fig.2: Malware installs the payload and requests Accessibility Service permissions. The interface of the command-and-control (C2) panel has been updated by the malware developers to feature a "v2" title (Figure 3), suggesting a newer iteration of ToxicPanda. Fig.3: ToxicPanda 2.0 control panel Fig.4: Malware…...

2+ day, 7+ hour ago   (105+ words) Zimperium A recent analysis highlights GoldDigger, an Android malware family designed to steal financial information and facilitate fraudulent activity on compromised devices. The malware abuses accessibility services to monitor user activity, capture credentials, and interact with banking applications while operating…...

1+ week, 3+ day ago   (85+ words) Zimperium In a story recently reported by Cybersecurity Insiders, researchers warn that consumers and employees are storing growing amounts of sensitive personal and business data on smartphones that often lack adequate security protections, increasing the risk of data exposure if…...

2+ week, 6+ hour ago   (107+ words) zimperium.com A recent investigation uncovered infrastructure supporting the Flying Eagle Android remote access trojan, identifying more than 170 command-and-control servers linked to the campaign. The malware is designed to give attackers extensive control over compromised devices, enabling surveillance, data theft,…...

3+ week, 1+ day ago   (207+ words) While organizations have invested heavily in securing traditional endpoints, cloud infrastructure, and networks, mobile remains an afterthought for many organizations. Consequently, with the help of AI, mobile has become the most vulnerable attack surface in the enterprise. These findings highlight…...

1+ mon, 4+ day ago   (111+ words) Zimperium Recent research highlights how vulnerabilities in wireless file-sharing technologies can create new opportunities for mobile attacks. Researchers identified weaknesses affecting proximity-based sharing features that could allow attackers within wireless range to exploit devices without requiring traditional phishing or malicious…...

1+ mon, 1+ week ago   (696+ words) The infection and distribution vectors for this banking trojan are fake websites that promise free access to KuaiBo, a prominent Chinese video-streaming and media player application. (Fig. 1). Modern mobile threats minimize their initial footprint concealing their malicious capabilities to evade…...

1+ mon, 2+ week ago   (154+ words) An emerging and highly aggressive Android Remote Access Trojan (RAT) called Glitch SPY has been reported by Cyble. Distributed through a sophisticated social engineering campaign, the malware uses a fraudulent Polish housing and apartment rental platform to lure unsuspecting users…...

1+ mon, 2+ week ago   (115+ words) Zimperium A recent campaign highlights how attackers are disguising malware as legitimate document reader applications to target Android users. Victims are lured into downloading seemingly harmless apps that promise to open or manage documents, but instead install malicious code capable…...