Latest Cybersecurity News and Articles

---

Fake Websites and ChatGPT - Recipe for High Risk

Security experts are cautioning against malware impersonating a ChatGPT Windows desktop client that is capable of copying login credentials from the Google Chrome login data directory. Users are advised to not click on random emails or links without prior knowledge or idea.

---

APT28APT28 Uses 'Windows Update' Phishing Emails to Target Ukrainian Agencies

Russian state-sponsored hacking group APT28 is targeting Ukrainian government entities with malicious emails disguised as Windows update instructions - warned CERT-UA. The attack begins with phishing emails sent to employees in government bodies, masquerading as system administrators of their departments.

---

Iranian Surveillance Operations Use BouldSpy to Track Minority Groups

The law enforcement command of the Islamic Republic of Iran (FARAJA) is allegedly physically deploying a malware strain known as BouldSpy on the devices of a section of people. As per reports, it is in use since at least 2020 and has claimed more than 300 victims to date. The malware serves the purpose of snooping on the activities of minority groups in the country.

---

20 of the best cyber security podcasts to listen to now

EXECUTIVE SUMMARY: As businesses become increasingly dependent on emerging technology, the importance of strong cyber security has never been more apparent. Stay informed about the latest threats, best practices, tools and perspectives in order to effectively protect your organization from potential cyber attacks. Check out the following informative and engaging podcasts that cover all aspects […] The post 20 of the best cyber security podcasts to listen to now appeared first on CyberTalk.

---

AresLoader Masquerades as Citrix Project to Drop Multiple Payloads

Experts at Cyble laid bare AresLoader, a new type of loader that distributes multiple malware strains, including IcedID, Aurora Stealer, and Laplas Clipper. A GitHub repository masquerading as a Citrix project was being used to distribute the malware. Experts recommend creating multiple lines of defense, including implementing genuine anti-virus software, firewalls, and an anti-phishing solution.

---

78% of survey respondents were targeted by brand impersonation scams

Brand impersonation schemes involve sending messages to impersonate a company to scam the receiver into giving away account credentials and payments.

---

Google opens up passkeys to personal account holders

Google wants to take us further into a passwordless future by allowing personal account holders to login using passkeys rather than using passphrases and multifactor authentication (MFA).

---

T-Mobile confirms second data breach in 2023

In an April 28 Attorney General filing, T-Mobile reported it was the victim of a second data breach of 2023, affecting 836 customers.

---

Now-Patched Vulnerability in TikTok Could Have Revealed User Activity and Information

The vulnerability, which has now been fixed, was caused by a window message event handler that does not properly validate the message origin, providing attackers access to sensitive user information.

---

Meta Takes Down Malware Campaign That Used ChatGPT as a Lure to Steal Accounts

Meta said it took steps to take down more than 1,000 malicious URLs from being shared across its services that were found to leverage OpenAI's ChatGPT as a lure to propagate about 10 malware families since March 2023.

---

Nearly 300 arrested in sprawling international dark web drug market takedown

The operation, dubbed SpecTor, also included the seizure of 117 firearms, 850 kilograms of drugs — including 64 kilograms of fentanyl or fentanyl-laced narcotics — and $53.4 million in cash and virtual currencies, the DoJ said in a statement.

---

Russia-linked Sandworm APT Uses WinRAR in Destructive Attacks on Ukraine’s Public Sector

Russia-linked APT group Sandworm is behind destructive cyberattacks against Ukrainian state networks, the Ukrainian Government Computer Emergency Response Team (CERT-UA) warns.

---

AT&T Email Accounts Abused to Steal Cryptocurrency

Cybercriminals have been using AT&T-provided email addresses to steal large amounts of cryptocurrency by accessing accounts via mail keys. One victim claimed to have lost $134,000 from its Coinbase account. The firms are suggested to update their security controls to prevent such activities and proactively require a password reset on some email accounts.

---

Drone Goggles Maker Claims Firmware Sabotaged to Brick Devices

Orqa, a maker of First Person View (FPV) drone racing goggles, claims that a contractor introduced code into its devices' firmware that acted as a time bomb designed to brick them.

---

The future of cellular IoT

By Antoinette Hodes, a Check Point Global Solutions Architect for the EMEA region and an Evangelist with the Check Point Office of the CTO.  The growth of IoT devices is transforming the way we live and work, offering unparalleled efficiency, productivity and interconnectedness. From smart homes to industrial automation, each IoT deployment scenario addresses a […] The post The future of cellular IoT appeared first on CyberTalk.

---

UK Government's New Fraud Strategy Gets Lukewarm Reception

The UK government has announced a new fraud strategy which will focus heavily on mitigating the impact of telephone and online scams, although critics have said it doesn’t go far enough.

---

Researchers Discover 3 Vulnerabilities in Microsoft Azure API Management Service

Three new security flaws have been disclosed in Microsoft Azure API Management service that could be abused by malicious actors to gain access to sensitive information or backend services. This includes two server-side request forgery (SSRF) flaws and one instance of unrestricted file upload functionality in the API Management developer portal, according to Israeli cloud security firm Ermetic. "

---

Researchers Uncover New Exploit for PaperCut Vulnerability That Can Bypass Detection

Cybersecurity researchers have found a way to exploit a recently disclosed critical flaw in PaperCut servers in a manner that bypasses all current detections. Tracked as CVE-2023-27350 (CVSS score: 9.8), the issue affects PaperCut MF and NG installations that could be exploited by an unauthenticated attacker to execute arbitrary code with SYSTEM privileges. While the flaw was patched by the

---

New Rapture Ransomware Bears Notable Similarities with Paradise

Trend Micro noticed a ransomware variant called Rapture that adopts a minimalistic approach and leaves behind only a small digital footprint. The attackers utilized the commercial packer Themida to pack the ransomware, hence making the analysis challenging. An RSA key configuration file used by the attackers was found to be similar to that used by the Paradise ransomware.

---

Payment Software Giant AvidXchange Suffers its Second Ransomware Attack of 2023

Hackers have published a trove of sensitive data stolen from payment software company AvidXchange after the company fell victim to ransomware for the second time this year.