More than 15,000 fraudulent websites impersonating TikTok Shop have been leveraged to facilitate the deployment of information- and cryptocurrency-stealing malware, as well as spyware, as part of the global ClickTok scam campaign, Cybernews reports.
Widespread Android targeting conducted by novel PlayPraetor trojan Over 11,000 Android devices, particularly in Portugal, Spain, France, Morocco, Peru, and Hong Kong, have been injected with the newly emergent PlayPraetor remote access trojan, which has a Chinese command-and-control panel, reports The Hacker News.
More than 4,000 IP addresses worldwide have been compromised by Vietnamese threat actors in attack campaigns involving the Python-based PXA Stealer malware, resulting in the theft of over 200,000 credentials, more than 4 million browser cookies, and hundreds of credit card records, The Hacker News reports.
Threat actors have been targeting Linux systems with the novel Plague backdoor that conceals itself as a nefarious Pluggable Authentication Module and enables both authentication bypass and persistent SSH access, Security Affairs reports.
Hackread reports that malicious actors have begun using malicious Windows shortcut files to distribute the Remcos RAT malware as part of a new attack campaign.
Threat actors have launched a deluge of cyberattacks during the first six months of 2025, resulting in record-high credential theft, ransomware, and data breach incidence, Cybernews reports.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
