help

If you think your password is secure just because you don't reuse it across different sites, can spot phishing attempts and avoid getting infected with info-stealers, think again. It's possible that your password is so weak that it can be cracked faster than you can read this sentence. And if it...

A vulnerability discovered by researchers in Android allows apps to steal passwords, one-time codes and other secret information from the screen without requiring any special operating‑system permissions. Restrictions on apps in Android are continually tightened so that fraudsters cannot use...

In this article we will look at the dangers posed by our beloved Wi‑Fi, Bluetooth and other wireless interfaces, review typical attacks and protection methods and sum up, because the price of convenience may be too high. Wi‑Fi Wi‑Fi has long been the standard for connecting to the Internet...

Diebold Nixdorf experts have warned of a new variation of the black box attacks on ATMs, which began to be used by attackers in Belgium. Black box attacks are a form of jackpotting attacks in which cybercriminals literally force an ATM to spit out money. Such an attack can be carried out using...

Inexperienced users of the messaging app are being intimidated with account block threats. The user receives a message supposedly from a support representative. The message states that a request to delete their account has been submitted in their name - to cancel it, they need to provide a...

Hacker KryptonZambie launches Black Friday on Cybercriminal Forum. Over 183 million records containing contact information and employment details have been stolen from a data broker and are being sold on the dark web. The seller, using the nickname KryptonZambie, has listed the data for $6,000...

A financially motivated Chinese threat actor dubbed "SilkSpecter" is using thousands of fake online stores to steal the payment card details of online shoppers in the U.S. and Europe. The fraud campaign started in October 2024, offering steep discounts for the upcoming Black Friday shopping...

Hackers are targeting Windows machines using the ZIP file concatenation technique to deliver malicious payloads in compressed archives without security solutions detecting them. The technique exploits the different methods ZIP parsers and archive managers handle concatenated ZIP files. This new...

Hacker forums Cracked, Nulled, MySellIX and StarkRDP are seized by the FBI, Europol and international law enforcement as part of ‘Operation Talent’. A large ‘‘Operation Talent’ seizure poster was splashed across most of the shady websites by Wednesday afternoon. “This website, as well...

Hackers gained access to the secure control panel of the autonomous system AIXBT, resulting in the theft of 55 ETH (approximately $107,000) from the Simulacrum wallet - a tool for building model portfolios. The bot's developer, Rxbt, confirmed the incident, stating that the attacker inserted two...

A hacking group dubbed 'Elusive Comet' targets cryptocurrency users in social engineering attacks that exploit Zoom's remote control feature to trick users into granting them access to their machines. Zoom's remote control feature allows meeting participants to take control of another...

Law enforcement authorities in the United States and the Netherlands have seized 39 domains and associated servers used by the HeartSender phishing gang operating out of Pakistan. Also known as Saim Raza and Manipulators Team, the group has operated online cybercrime marketplaces for over a...

Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login servers. This statement comes after a threat actor eleased multiple text files yesterday containing a sample database, LDAP...

A new malware-as-a-service (MaaS) platform named 'SuperCard X' has emerged, targeting Android devices via NFC relay attacks that enable point-of-sale and ATM transactions using compromised payment card data. SuperCard X is linked to Chinese-speaking threat actors and shows code similarities with...

$10 Million Bounty for Criminal Head who earned up to 1 Billion from Stolen Cards The U.S. Department of Justice has charged Timur Shahmamatov in connection with the now-defunct carder forum Joker's Stash. The accused (who used the nicknames "JokerStash" and "Vega") launched the forum in October...

A threat actor exploited a zero-day vulnerability in Samsung’s Android image processing library to deploy a previously unknown spyware called 'LandFall' using malicious images sent over WhatsApp. The security issue was patched this year in April, but researchers found evidence that the LandFall...

Hackers exploited a critical vulnerability and the built-in antivirus feature in Gladinet's Triofox file-sharing and remote-access platform to achieve remote code execution with SYSTEM privileges. The security issue leveraged in the attack is CVE-2025-12480 and can be used to bypass...

Google is suing more than two dozen unnamed individuals allegedly involved in peddling a popular China-based mobile phishing service that helps scammers impersonate hundreds of trusted brands, blast out text message lures, and convert phished payment card data into mobile wallets from Apple and...

Uhale Android-based digital picture frames come with multiple critical security vulnerabilities and some of them download and execute malware at boot time. Mobile security company Quokka conducted an in-depth security assessment on the Uhale app and found behavior suggesting a connection with...

The police in the Netherlands have seized around 250 physical servers powering a bulletproof hosting service in the country used exclusively by cybercriminals for providing complete anonymity. Politie, the police force in the Netherlands, did not name the service but said that it has been used...