Endpoint/Device Security

The routers’ utility makes them “popular for both consumers and malicious cyber actors,” security agencies warn.

Operators of the Anatsa Android banking trojan have targeted Czechia, Slovakia, and Slovenia with the malware as part of a November attack campaign, which came months after the trojan, also known as Toddler and TeaBot, had been leveraged in attacks against the U.S., Switzerland, and the UK, among others, reports The Hacker News.

Operators of the SpyNote Android banking trojan have updated the payload to impersonate legitimate cryptocurrency wallets and facilitate cryptocurrency exfiltration, which represents a significant shift from the malware's prior focus on account credentials, according to Hackread.

BleepingComputer reports that updated variants of the Android malware XLoader, also known as MoqHao, that allowed automated execution after installation have emerged.

Major U.S. insurance firms Bankers Life and Casualty Company and Washington National Insurance Company disclosed having data from more than 66,000 customers stolen following a SIM swapping attack in November, according to Hackread.

Despite the win against the Chinese nation-state APT, government agencies issued fresh warnings about the dangers it poses to critical U.S. infrastructure.

Almost 150 Android devices across India and Pakistan have been compromised by suspected Indian state-sponsored threat operation PatchWork in a new attack campaign leveraging mostly messaging apps that have been laced with the VajraSpy remote access trojan, The Hacker News reports.