New FiXS ATM Malware Targeting Mexican Banks

New FiXS ATM Malware Targeting Mexican Banks,

A new ATM malware strain dubbed FiXS has been observed targeting Mexican banks since the start of February 2023.
« The ATM malware is hidden inside another not-malicious-looking program, » Latin American cybersecurity firm Metabase Q said in a report shared with The Hacker News.
Besides requiring interaction via an external keyboard, the Windows-based ATM malware is also vendor-agnostic and is

,

A new ATM malware strain dubbed FiXS has been observed targeting Mexican banks since the start of February 2023.
« The ATM malware is hidden inside another not-malicious-looking program, » Latin American cybersecurity firm Metabase Q said in a report shared with The Hacker News.
Besides requiring interaction via an external keyboard, the Windows-based ATM malware is also vendor-agnostic and is

, ,
https://thehackernews.com/2023/03/new-fixs-atm-malware-targeting-mexican.html

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices,

A pair of serious security defects has been disclosed in the Trusted Platform Module (TPM) 2.0 reference library specification that could potentially lead to information disclosure or privilege escalation.
One of the vulnerabilities, CVE-2023-1017, concerns an out-of-bounds write, while the other, CVE-2023-1018, is described as an out-of-bounds read. Credited with discovering and reporting the

,

A pair of serious security defects has been disclosed in the Trusted Platform Module (TPM) 2.0 reference library specification that could potentially lead to information disclosure or privilege escalation.
One of the vulnerabilities, CVE-2023-1017, concerns an out-of-bounds write, while the other, CVE-2023-1018, is described as an out-of-bounds read. Credited with discovering and reporting the

, ,
https://thehackernews.com/2023/03/new-flaws-in-tpm-20-library-pose-threat.html

Quand l’IA permet de pirater un compte bancaire

Quand l’IA permet de pirater un compte bancaire,

Un homme a réussi à pirater sa banque grâce à une IA gratuite.

Un journaliste explique avoir utilisé une réplique de voix générée par l’IA pour tromper le système de vérification de la voix de la banque britannique Lloyds, et accéder aux informations d’un compte bancaire.

,

Un homme a réussi à pirater sa banque grâce à une IA gratuite.

Un journaliste explique avoir utilisé une réplique de voix générée par l’IA pour tromper le système de vérification de la voix de la banque britannique Lloyds, et accéder aux informations d’un compte bancaire.

, ,
https://www.01net.com/actualites/quand-lia-permet-de-pirater-un-compte-bancaire.html

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor,

The China-aligned Mustang Panda actor has been observed using a hitherto unseen custom backdoor called MQsTTang as part of an ongoing social engineering campaign that commenced in January 2023.
« Unlike most of the group’s malware, MQsTTang doesn’t seem to be based on existing families or publicly available projects, » ESET researcher Alexandre Côté Cyr said in a new report.
Attack chains

,

The China-aligned Mustang Panda actor has been observed using a hitherto unseen custom backdoor called MQsTTang as part of an ongoing social engineering campaign that commenced in January 2023.
« Unlike most of the group’s malware, MQsTTang doesn’t seem to be based on existing families or publicly available projects, » ESET researcher Alexandre Côté Cyr said in a new report.
Attack chains

, ,
https://thehackernews.com/2023/03/chinese-hackers-targeting-european.html

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware’s Deadly Capabilities

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware’s Deadly Capabilities

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new advisory about Royal ransomware, which emerged in the threat landscape last year.
« After gaining access to victims’ networks, Royal actors disable antivirus software and exfiltrate large amounts of data before ultimately deploying the ransomware and encrypting the systems, » CISA said.
The custom ransomware

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new advisory about Royal ransomware, which emerged in the threat landscape last year.
« After gaining access to victims’ networks, Royal actors disable antivirus software and exfiltrate large amounts of data before ultimately deploying the ransomware and encrypting the systems, » CISA said.
The custom ransomware

, ,
https://thehackernews.com/2023/03/us-cybersecurity-agency-raises-alarm.html

Cyberattaque : la Ville de Lille victime d’une cyberattaque

Cyberattaque : la Ville de Lille victime d’une cyberattaque,

"Aucune difficulté n'a été constatée sur les données stockées sur le système et les serveurs", selon la Ville.

La municipalité de Lille fonctionne en ralenti depuis qu’elle a été attaquée par des pirates informatiques : une nouvelle cyberattaque qui touche de plus en plus les collectivités locales.

,

"Aucune difficulté n'a été constatée sur les données stockées sur le système et les serveurs", selon la Ville.

La municipalité de Lille fonctionne en ralenti depuis qu’elle a été attaquée par des pirates informatiques : une nouvelle cyberattaque qui touche de plus en plus les collectivités locales.

, ,
https://www.01net.com/actualites/cyberattaque-la-ville-de-lille-victime-dune-intrusion-dans-son-systeme-dinformation.html

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software,

A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software.
« The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into an AWS account in order to steal proprietary software and credentials, » Sysdig said in a new report.
The advanced cloud attack also entailed the

,

A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software.
« The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into an AWS account in order to steal proprietary software and credentials, » Sysdig said in a new report.
The advanced cloud attack also entailed the

, ,
https://thehackernews.com/2023/03/hackers-exploit-containerized.html

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers,

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack.
« Underpinning this campaign was the use of transfer[.]sh, » Cado Security said in a report shared with The Hacker News. « It’s possible that it’s an attempt at evading detections based on other common code

,

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack.
« Underpinning this campaign was the use of transfer[.]sh, » Cado Security said in a report shared with The Hacker News. « It’s possible that it’s an attempt at evading detections based on other common code

, ,
https://thehackernews.com/2023/03/new-cryptojacking-campaign-leverages.html

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots,

As a primary working interface, the browser plays a significant role in today’s corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices. A new report published by LayerX, a browser security vendor, finds that attackers are exploiting this reality and are targeting it in increasing

,

As a primary working interface, the browser plays a significant role in today’s corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices. A new report published by LayerX, a browser security vendor, finds that attackers are exploiting this reality and are targeting it in increasing

, ,
https://thehackernews.com/2023/03/2023-browser-security-report-uncovers.html

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI,

A malicious Python package uploaded to the Python Package Index (PyPI) has been found to contain a fully-featured information stealer and remote access trojan.
The package, named colourfool, was identified by Kroll’s Cyber Threat Intelligence team, with the company calling the malware Colour-Blind.
« The ‘Colour-Blind’ malware points to the democratization of cybercrime that could lead to an

,

A malicious Python package uploaded to the Python Package Index (PyPI) has been found to contain a fully-featured information stealer and remote access trojan.
The package, named colourfool, was identified by Kroll’s Cyber Threat Intelligence team, with the company calling the malware Colour-Blind.
« The ‘Colour-Blind’ malware points to the democratization of cybercrime that could lead to an

, ,
https://thehackernews.com/2023/03/experts-identify-fully-featured-info.html