Search: “mod”

97 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 99 Vulnerability 62 Ransomware 42 Industry 35 Exploit / PoC 28 Threat actor 25 Policy & legal 21 Data breach 20 Phishing & fraud 14 Research 8 Advisory 5 AI safety & security 4 AI tools & infra 2 AI policy 1

SeverityAll critical 91 high 108 medium 97 low 67 info 6

Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon

Check Point identifies Chinese-speaking group Gambling Goblin hijacking Brazilian government domains via malicious Apache modules for SEO-manipulated gambling phishing.

Check Point Research tracks a sustained campaign since mid-2025 against Brazilian government and educational organizations by Gambling Goblin, a Chinese-speaking cybercrime cluster linked to Earth Berberoka. Attackers compile and install malicious Apache modules that silently reverse-proxy visitors to phishing pages impersonating Google Play, Microsoft Store, and Amazon, chaining compromised high-reputation domains to inflate search rankings. The group deploys a heavily obfuscated Linux toolkit including DownPro, AlphaAgent, oRAT, a 3snake-based credential stealer, and SSH brute-forcers, with parallel phishing networks localized for Vietnamese, Spanish, and English victims.

Check Point ResearchSep 2, 10:16 UTC · 14d agoThreat actor

FakeWallet cryptostealer propagating via iOS App Store applications

Kaspersky SecurelistApr 20, 09:22 UTC · Apr 20, 2026Malware

Machine learning–powered Android Trojans bypass script

Security AffairsJan 22, 19:26 UTC · Jan 22, 2026Malware

Tirreno: Open-source fraud prevention platform

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2025Phishing & fraud

UK Home Office’s new vulnerability reporting mechanism leaves researchers open to prosecution

The RecordFeb 25, 13:07 UTC · Feb 25, 2025Vulnerability

Expert Warns of Growing Android Malware Activity

Infosecurity MagazineFeb 26, 16:30 UTC · Feb 26, 2024Malware

Google Play axes batch of Telegram clones that spy on users

The RecordSep 11, 20:32 UTC · Sep 11, 2023Malware

Latvia confirms phishing attack on Ministry of Defense, linking it to Russian hacking group

The RecordFeb 7, 15:07 UTC · Feb 7, 2023Phishing & fraud

Modified WhatsApp App Caught Infecting Android Devices with Malware

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2022Malware

#BHUSA : Failure to Challenge is a Social Engineering Risk

Infosecurity MagazineAug 12, 13:00 UTC · Aug 12, 2022Phishing & fraud

British Army Social Media Accounts Hijacked

Infosecurity MagazineJul 4, 10:45 UTC · Jul 4, 2022Phishing & fraud

YTStealer info-stealing malware targets YouTube content creators

Security AffairsJun 30, 06:36 UTC · Jun 30, 2022Malware

Transparent Tribe campaign uses new bespoke malware to target Indian government officials

Cisco TalosMar 29, 12:01 UTC · Mar 29, 2022Malware

Researcher Demonstrates 4 New Variants of HTTP Request Smuggling Attack

The Hacker NewsAug 5, 18:57 UTC · Aug 5, 2020Vulnerability

Friday Squid Blogging: Striped Pyjama Squid

Schneier on SecurityJan 27, 14:14 UTC · Jan 27, 2020Vulnerability1

Shellshock

Cisco TalosSep 26, 20:44 UTC · Sep 26, 2014Vulnerability CVE-2014-6271 CVE-2014-7169

Decoding Domain Generation Algorithms (DGAs) Part III

Cisco TalosMar 6, 15:41 UTC · Mar 6, 2014Malware

LG smart TVs caught logging audio with screen off and snooping on local devices

Gamers Nexus found LG smart TVs record microphone audio in standby, scan home networks, and feed LG Ad Solutions ad targeting.

A 135-minute Gamers Nexus investigation with Level1Techs and independent researchers found retail LG OLED TVs running webOS sweep local networks, gather device names and Wi-Fi metadata, and run Automated Content Recognition. Tests showed the TVs capture clean microphone audio while appearing powered down and store it offline, uploading once reconnected. The team also found RCE vulnerabilities in webOS now moving through responsible disclosure; LG claims 216 million smart TV sales, and its ad unit claims access to 363 million addressable devices in the US.

Hacker News · securitySep 7, 07:03 UTC · 9d agoResearch HN 1151↑ · 3 comments

Free streaming boxes may be routing criminal traffic through your home

Researchers found SuperBox streaming boxes and the CyberFlix TV app enroll home connections into the Popanet residential proxy network, routing criminal traffic.

Researchers found that SuperBox devices and the CyberFlix TV app, distributed through SuperBox's custom app store, contain Popanet proxy functionality that registers the device with servers controlled by the proxy operator, enrolling household connections into residential proxy networks. The reported configuration weakens Android safeguards with exposed ADB access, root-level privileges without authentication, and removal of app-install protections. Plume's research warns these proxy networks can also function as malware-delivery platforms, and the FBI notes foreign entities use residential proxies to conceal activity such as credential stuffing and account abuse. Malwarebytes advises disconnecting and replacing affected SuperBox/CyberFlix devices rather than factory-resetting them.

Malwarebytes LabsSep 4, 09:20 UTC · 12d agoMalware in the wild

HTTP/2 Bomb CVE-2026-49975

Fortinet advisory details CVE-2026-49975, an Apache HTTP Server HTTP/2 flaw enabling denial of service, affecting versions 2.4.17 through 2.4.67.

Fortinet PSIRT advisory FG-IR-26-163, revised 2026-08-19, covers CVE-2026-49975, a memory allocation with excessive size value flaw (HTTP/2 bomb) in Apache HTTP Server's mod_http2, scored CVSSv3 5.8. Malicious HTTP requests can cause a denial of service, and affected versions span Apache HTTP Server 2.4.17 through 2.4.67. The advisory text does not state which Fortinet product bundles the affected Apache component or whether exploitation has been observed.