#qakbot
#qakbot
[ follow ]
#cybersecurity #malware #supply-chain-attack #phishing #social-engineering #data-breach #axios #north-korea
Marketing tech
fromTipRanks Financial
1 day agoAI Recommendation Poisoning: Why Microsoft (NASDAQ:MSFT) Is Fighting So Hard - TipRanks.com
AI recommendation poisoning manipulates AI outputs by embedding hidden instructions in websites, potentially skewing information and affecting marketing strategies.
Privacy professionals
fromComputerworld
3 weeks agoCyber criminals too are working from home... your home
The FBI warns that cybercriminals use residential proxies to mask illegal activities by hijacking IoT devices, smartphones, and routers, threatening both consumers and enterprises, particularly older devices.
fromSecuritymagazine
2 days agoAI Startup Mercor, Which Works With Open AI and Anthropic, Confirms Data Breach
Four terabytes of data have reportedly been stolen, including database records and source code. Allegedly stolen data has been published on a leak site, containing Slack information, internal ticketing data, and videos of conversations between Mercor's AI systems and contractors.
Information security
Artificial intelligence
fromFuturism
1 month agoAI Tools Are Supercharging Hackers
AI systems are increasingly weaponized for cybercrime, enabling hackers to exploit vulnerabilities at scale with minimal technical expertise, as demonstrated by recent attacks on Mexican government networks and global firewall systems.
Information security
fromnews.bitcoin.com
4 days agoChainalysis Deploys AI Agents to Counter Criminal Use of Artificial Intelligence in Crypto
Chainalysis introduces AI agents to enhance fraud detection and compliance without requiring deep technical expertise, ensuring data quality and human oversight.
fromWIRED
2 weeks agoUS Takes Down Botnets Used in Record-Breaking Cyberattacks
The US Department of Justice, working with the cybercrime-fighting agency within the US Department of Defense known as the Defense Criminal Investigative Service, announced that it had dismantled four massive botnets in a single operation, removing the command-and-control servers used to commandeer the hacker-run armies of compromised devices known by the names JackSkid, Mossad, Aisuru, and Kimwolf.
Information security
Information security
fromThe Hacker News
2 weeks agoKonni Deploys EndRAT Through Spear-Phishing, Uses KakaoTalk to Propagate Malware
North Korean threat actor Konni uses spear-phishing emails to compromise victims and abuse their KakaoTalk application to distribute malware to contacts while stealing sensitive documents.
#phishing-attack
Information security
fromSecurityWeek
2 weeks agoSecurity Firm Executive Targeted in Sophisticated Phishing Attack
A C-level executive at Outpost24 was targeted by a sophisticated phishing attack using the Kratos phishing-as-a-service kit that exploited legitimate services like Cisco and Nylas to bypass security defenses.
Information security
fromSecuritymagazine
2 weeks agoTargeted Phishing Attack Breaches Biotech Company Data
Intuitive Surgical suffered a phishing attack compromising employee credentials, exposing customer and corporate data, though operational systems and customer networks remained unaffected due to network segmentation.
Information security
fromThe Hacker News
3 weeks agoHive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks
AI-generated malware Slopoly enables threat actors to develop malware frameworks significantly faster, demonstrating the weaponization of AI for cybercriminal purposes.
fromTheregister
3 weeks agoCrims hit EV charger firm ELECQ, steal customer contact data
In a notice sent to customers on Monday and seen by The Register, the EV charging outfit said that it detected "unusual activity" on its AWS cloud platform on March 7 and quickly discovered that attackers had launched a ransomware attack against parts of its infrastructure. According to the message, some databases were both encrypted and copied during the intrusion, meaning that the crooks likely walked off with user information before the company pulled the plug.
Information security
Information security
fromThe Hacker News
1 month agoScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks
North Korean threat actor ScarCruft deployed the Ruby Jumper campaign using malware families that abuse Zoho WorkDrive for C2 communications and removable media to compromise air-gapped networks.
fromComputerWeekly.com
1 month agoQilin crew continues to dominate ransomware ecosystem | Computer Weekly
Given the scale and disruption of 2025, this pattern could be an early signal that 2026 may follow a similar path. Organisations should not mistake the month-on-month drop for a decline in risk. As for Qilin, its attacks show no signs of stopping - within the past few days it has claimed a breach of the Local 100 Chapter of the Transport Workers Union of America, affecting 41,000 current and 26,000 former employees.
Information security
fromMashable
1 month agoHackers use this tool to bypass fraud detection and weaponize Google ads
The service, referred to as 1Campaign, provides hackers with a one-stop-shop for running malicious ads and enabling fraud "at scale," a recent report by cybersecurity company Varonis uncovered. Using just a single dashboard, hackers can cloak malicious content from security researchers, ad platform reviewers, and automated scanners - who instead see a benign white page - and target general users with phishing or scam attempts.
Information security
[ Load more ]