Malware

Action mutability weakness vulnerability in Apache OpenWhisk could allow a remote attacker to overwrite the source code.

A dangerous mobile banking trojan that can infect even the most modern versions of Android has reportedly had its source code leaked online -- a development that could spur on attacks from myriad actors who benefit from this windfall.

A data breach and corresponding ransomware attack at an Alaskan medical billing company that compromised the health information of roughly 44,600 people counteed a Fairbanks-based government municipality among its victims.

An apparent botnet comprised of more than 3,000 separate source IPs generated a large, sudden spike in exploit attacks on July 19, targeting D-Link 2750B and certain Dasan GPON (Gigabit Passive Optical Network) small and home office routers.

The list is also shared with credit card scammers, digital bank robbers, and several state-backed hackers including a man wanted for stealing rocket software.

Cybercriminals are putting a new spin on the old trick of hiding malware code in Exchangeable Image File Format (EXIF) data. Recently, attackers were observed using this technique in image files, rather than text files, and uploading them to googleusercontent.com servers.

Mealybug, the threat group behind the Emotet banking trojan has evolved over the years from making its own custom malware to operating as a distributor for other threat groups.