#malware

VOLTA, the infostealer that asks an AI which victims are worth the effort

VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is […]

Security Affairs · EN

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted by government-backed spyware. The warning follows Apple’s notifications, which began reaching iPhones on October 29, according to the federal cybersecurity office, the BSI. The BSI says members […]

Security Affairs · EN

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that had enrolled more than 1.3 million set-top boxes in a botnet. The result of the investigation into the malware operation is the striking part: […]

Security Affairs · EN

Google dismantles botnet secretly running on 1.3 million Android TV boxes

Google has cut ties with the company behind the botnet campaign.

Ars Technica · EN

Tem uma destas boxes Android TV? Google cortou o acesso a um malware pré-instalado

A compra de leitores multimédia económicos com Android é uma prática comum, mas os riscos associados voltaram a ser expostos. A Google confirmou uma operação para desmantelar uma rede criminosa suportada por backdoors instaladas de fábrica em mais de 1,3 milhões de dispositivos. A vulnerabilidade não resultou de falhas acidentais de segurança, mas antes de […]

Pplware · PT

Arnaques dopées à l'IA - Comment ne pas tomber dans le panneau #sponso

Une commande à coller, un lien, du code, un agent : des pièges où l'IA sert de décor de confiance, avec le réflexe gratuit pour chacun et ce que l'analyse des conversations d'ESET couvre ou pas.

Korben · FR