Major new crypto wallet phishing campaign targets Trezor users

Techradar reports A new phishing campaign has been discovered targeting cryptocurrency hardware wallet firm Trezor. These wallets allow crypto users to store their funds offline, rather than in a “hot wallet” (a mobile or desktop app), or with a third party (an exchange, a custodial service, or a lending/borrowing firm). Hardware wallets, also known as … More Major new crypto wallet phishing campaign targets Trezor users

ESET Research: Mustang Panda’s latest backdoor targets Europe, Asia, and Australia

ESET researchers have analyzed MQsTTang, a new custom backdoor that we attribute to the Mustang Panda APT group. Confirmed targets are in Bulgaria and Australia, with a likely target in Taiwan. Due to the nature of the decoy filenames used, ESET researchers believe that political and governmental organizations in Europe and Asia are also being … More ESET Research: Mustang Panda’s latest backdoor targets Europe, Asia, and Australia

ESET Research analyzes BlackLotus: A UEFI bootkit that can bypass UEFI Secure Boot on fully patched systems

ESET researchers are the first to publish an analysis of BlackLotus, the first in-the-wild UEFI bootkit that is capable of bypassing an essential platform security feature — UEFI Secure Boot. This UEFI bootkit has been sold on hacking forums for USD$5,000 since at least October 2022 and can run even on fully up-to-date Windows 11 … More ESET Research analyzes BlackLotus: A UEFI bootkit that can bypass UEFI Secure Boot on fully patched systems

ESET Podcast: Ransomware trashed data, Android threats soared in T3 2022

And that’s just the tip of the iceberg when it comes to the trends that defined the cyberthreat landscape in the final four months of 2022. Data from the latest ESET Threat Report, which provides an in-depth look at the threat landscape from September to December 2022, confirmed several previously observed trends. The key of them … More ESET Podcast: Ransomware trashed data, Android threats soared in T3 2022

LinkedIn scammers step up sophistication of online attacks

LinkedIn has been hit by a rise in sophisticated recruiting scams as fraudsters seek to cash in on the trend of remote working and widespread layoffs in the tech industry. Job seekers from the world’s largest professional network are being cheated out of money after participating in fake recruitment processes set up by scammers posing … More LinkedIn scammers step up sophistication of online attacks