Endpoint/Device Security

BleepingComputer reports that intrusions involving a new Mirai-based botnet have been targeting Teltonika RUT9XX routers impacted by the CVE-2018-17532 flaw, TP-Link devices affected by CVE-2023-1389, and DigiEver DS-2105 Pro network video recorders with a yet-to-be patched remote code execution vulnerability as part of an attack campaign believed to have commenced in September.

DocuSign campaign one of many mobile phishing campaigns that aim to steal corporate credentials from top executives.

Malicious actors have distributed Android spyware as the BMI CalculationVsn app through the Amazon Appstore.

Attacks involved the creation of fraudulent Army+ websites on the serverless Cloudflare Workers platform.

Mounting BadBox activity has been evident with the registration of over 160,000 unique IP addresses.

FBI says malware operation is building a botnet out of smart cameras and video boxes.

Infiltration of U.S. telecommunications networks by Chinese state-backed threat operation Salt Typhoon has prompted the Cybersecurity and Infrastructure Security Agency to issue a new advisory urging senior government officials and politicians, to leverage end-to-end encrypted messaging apps on their Android and Apple devices, according to The Record, a news site by cybersecurity firm Recorded Future.