Application security, Malware, Threat Management

Zeus-MySpace spam

The insidious Zeus, or Zbot, trojan now is trying to infect users through spam that claims to come from MySpace, Gary Warner, director of research in computer forensics at the University of Alabama at Birmingham, said in a blog post Monday. The messages falsely inform recipients that they must update their MySpace account. A link is provided -- the scam is leveraging some 30 domains -- and if users click they are brought to a page asking them to enter their login credentials. Doing so brings them to another page that includes a malicious link for a "MySpace Update Tool," which actually installs the trojan. Just 14 of 41 anti-virus products detected the malware as of Monday, according to a VirusTotal report. -- DK

An In-Depth Guide to Application Security

Get essential knowledge and practical strategies to fortify your applications.

Related

DeepSeek prohibited in New York government devices

Increasing concerns regarding the potential utilization of Chinese artificial intelligence platform DeepSeek for foreign government surveillance have prompted New York Gov. Kathy Hochul to ban the AI chatbot's usage across all state-issued devices just days after Texas Gov. Greg Abbott issued a similar prohibition for DeepSeek and Chinese-owned social media apps.

OpenAI claimed to have over 20M credentials stolen

Such an extensive OpenAI account credential theft may have been achieved by exploiting vulnerabilities or securing admin credentials to infiltrate the auth0.openai.com subdomain, according to Malwarebytes researchers, who noted that confirmation of the leak's legitimacy would suggest emirking's access to ChatGPT conversations and queries.

Egregious security gaps found in DeepSeek iOS app

Aside from delivering unencrypted device and mobile app registration information to Volcano Engine servers owned by TikTok parent firm ByteDance, DeepSeek's iOS app has also been leveraging an insecure symmetric encryption algorithm, a hardcoded encryption key, and old initialization vectors, an audit from NowSecure showed.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

Related Terms

BackdoorBannerBrute ForceCommon Gateway Interface (CGI)CookieData MiningDenial of ServiceDistributed ScansDomain HijackingDumpSec

You can skip this ad in 5 seconds