TrickBot App Bypasses Non-SMS Banking 2FA
TrickBot victims are being fooled into downloading an app that records their screens – stealing non-SMS 2FA passcodes for banking websites.
Hacks
WHO Targeted in Espionage Attempt, COVID-19 Cyberattacks Spike
The DarkHotel group could have been looking for information on tests, vaccines or trial cures.
Coronavirus Poll Results: Cyberattacks Ramp Up, WFH Prep Uneven
A poll of Threatpost readers shows that security preparedness is uneven as organizations make an unprecedented transition to remote working.
A fresh module aims to compromise remote desktop accounts to access corporate resources.
Researchers warn that a Magecart group has set up skimmers on the blender manufacturer’s website, in hopes of stealing customer payment-card data.
The Pakistani-linked APT has been spotted infecting victims with data exfiltration malware.
Rise and fall of a Nigerian cybercriminal called ‘Dton,’ who made hundreds of thousands of dollars in a 7-year campaign, outlined in new report.
Organizations are sending employees and students home to work and learn — but implementing the plan opens the door to more attacks, IT headaches and brand-new security challenges.
Researchers with Akamai say that 75 percent of all credential abuse attacks against the financial services industry were targeting APIs.
Mozilla Foundation snuffs out bugs with the introduction of Firefox 74 and ESR 68.6.
