Malware

Bank robbers often stick up the same bank twice, but a recent lawsuit between a Virginia bank and its insurer revealed the bank lost $2.4 million when staffers twice fell for phishing attacks resulting in illegal ATM withdrawals.

Researchers from Proofpoint have announced the discovery of a brand new remote access trojan, and an upgraded version of an old banking trojan -- both of which have been used in recent phishing campaigns.

Action mutability weakness vulnerability in Apache OpenWhisk could allow a remote attacker to overwrite the source code.

A dangerous mobile banking trojan that can infect even the most modern versions of Android has reportedly had its source code leaked online -- a development that could spur on attacks from myriad actors who benefit from this windfall.

A data breach and corresponding ransomware attack at an Alaskan medical billing company that compromised the health information of roughly 44,600 people counteed a Fairbanks-based government municipality among its victims.

An apparent botnet comprised of more than 3,000 separate source IPs generated a large, sudden spike in exploit attacks on July 19, targeting D-Link 2750B and certain Dasan GPON (Gigabit Passive Optical Network) small and home office routers.

The list is also shared with credit card scammers, digital bank robbers, and several state-backed hackers including a man wanted for stealing rocket software.

Cybercriminals are putting a new spin on the old trick of hiding malware code in Exchangeable Image File Format (EXIF) data. Recently, attackers were observed using this technique in image files, rather than text files, and uploading them to googleusercontent.com servers.