Sophisticated Cryptojacking Campaign Targets South Korean Internet Cafes Using Gh0st RAT and T-Rex Miner

bbaca9fa 928f 4746 b327 08b414ebd6df

Cybersecurity researchers at AhnLab Security Emergency Response Center (ASEC) have uncovered a sophisticated multi-stage attack campaign targeting internet cafes across South Korea. The operation combines the notorious Gh0st RAT remote access trojan with the T-Rex cryptocurrency miner to establish persistent access and conduct unauthorized digital asset mining on compromised systems. Attack Timeline and Scope Investigation … Read more

International Law Enforcement Operation Dismantles AVCheck Malware Testing Service

Futuristic scene of a man using a touchscreen display in a city.

A coordinated international law enforcement operation has successfully dismantled AVCheck, one of the world’s largest malware testing platforms used by cybercriminals to evade antivirus detection. The takedown represents a significant victory in the ongoing battle against organized cybercrime, disrupting a critical component of the criminal infrastructure that enabled sophisticated cyberattacks worldwide. How AVCheck Enabled Cybercriminal … Read more

Crocodilus Banking Trojan Evolves with Fake Contact Creation Capability

289908ba 9a1f 47fe bb28 f1d38507f50b

Cybersecurity researchers have documented a significant evolution in the Crocodilus banking trojan, which has now developed the ability to create fraudulent contacts on infected mobile devices. This advanced functionality provides cybercriminals with sophisticated tools for conducting social engineering attacks, enabling them to impersonate bank representatives, customer support agents, or even trusted contacts from the victim’s … Read more

Major Cyber Threat: BO Team’s Advanced Persistent Attacks Target Critical Infrastructure

** Man in a suit focused on a laptop, screens showing warning about phishing attacks.

Kaspersky Lab’s cybersecurity researchers have uncovered an extensive cyber assault campaign orchestrated by the hacktivist group BO Team (also known as Black Owl, Lifting Zmiy, and Hoody Hyena). The attacks, which began in mid-2023, have targeted dozens of organizations across government, IT, telecommunications, and industrial sectors, demonstrating a sophisticated approach to network infiltration and data … Read more

Zanubis Android Banking Trojan: Enhanced Version Targets Financial Apps and Crypto Wallets

abdd7a65 7391 499a aea6 c2faeb1428df

Cybersecurity researchers have identified a sophisticated evolution of the Zanubis Android banking trojan, marking a significant escalation in mobile threats targeting financial services and cryptocurrency wallet users. This enhanced malware variant demonstrates advanced capabilities that pose substantial risks to mobile banking security, employing complex social engineering tactics and accessibility service exploitation to compromise victim devices. … Read more

Cartier Suffers Major Data Breach: What Customers Need to Know

2e89bd35 64d0 4f2c 8ff3 a5b1b14caeb9

French luxury jewelry house Cartier has become the latest victim of a significant cybersecurity incident that compromised customer personal information. This breach highlights the escalating cyber threats targeting the retail sector and demonstrates how even prestigious brands remain vulnerable to sophisticated attacks. Understanding the Cartier Security Breach According to official customer notifications, unauthorized parties gained … Read more

BadBox 2.0 Botnet Compromises Over One Million Android Devices in Global Cyber Attack

51221186 9ba2 444f bee8 35eab1d08fa5

The Federal Bureau of Investigation has officially confirmed a widespread cybersecurity incident involving the BadBox 2.0 botnet, which has successfully compromised over one million Android-based devices across the globe. This sophisticated malware campaign targets smartphones, tablets, smart TVs, streaming devices, and various Internet of Things (IoT) products, converting them into unwitting participants in a massive … Read more

AT&T Data Breach: 70 Million Customer Records Resurface with Decrypted Personal Information

1d611f07 52b4 48f7 87e6 06746b108681

Telecommunications giant AT&T faces renewed scrutiny as cybercriminals have released an enhanced version of a massive customer database containing 70 million records originally compromised in 2021. The alarming development reveals that threat actors have successfully decrypted previously encrypted sensitive information, significantly amplifying the security risks for affected customers. Investigation Reveals Complex Data Breach Timeline AT&T … Read more

Major Cybersecurity Alert: Billions of Stolen Cookies Expose Users to Digital Identity Theft

Icon of a cookie behind a padlock, symbolizing online privacy and security.

A groundbreaking investigation by NordVPN has uncovered an unprecedented cybersecurity threat: over 93.7 billion stolen cookie files discovered circulating in dark web forums and Telegram channels. Most alarmingly, approximately 7-9% of these stolen cookies remain active, potentially giving cybercriminals direct access to users’ personal accounts and sensitive information. Understanding the Scale and Impact of Stolen … Read more

Critical Roundcube Webmail Vulnerability CVE-2025-49113 Faces Active Exploitation by Cybercriminals

deb9dc2c 7790 4471 ba80 5dfbc19d582d

Cybersecurity researchers have confirmed widespread exploitation of a critical vulnerability in Roundcube Webmail, designated as CVE-2025-49113. This severe security flaw carries a CVSS score of 9.9, enabling attackers to execute arbitrary code on vulnerable servers. The vulnerability has existed in the codebase for over a decade, making it one of the most significant webmail security … Read more