⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Group-IB researchers have identified WindRelay, a previously unseen Android NFC relay malware deployed alongside the SpyNote RAT to facilitate contactless payment fraud. The attack uses social engineering to trick victims into sideloading a personalized malicious app, then silently installs the NFC reader component, which intercepts live card data and relays it via WebSocket to a fraudster's device for real-time cashouts.
WhatsApp has introduced an optional 'Scam Alert' feature that leverages local machine learning to identify and warn users about potential scam messages. This update is designed to improve user security by proactively detecting and alerting users to suspicious activities.
The article details how North Korean IT workers, often linked to Lazarus Group, infiltrate organizations by exploiting the hiring process rather than breaking in externally. An investigation using controlled sandboxes exposed their use of forged documents, AI tools, and specific infrastructure, including IP addresses and VPN exit nodes.
Researchers at Group-IB discovered WindRelay, a new NFC relay malware that captures live card data via NFC and forwards it in real time to attackers. This malware, combined with SpyNote RAT, allows criminals to remotely control victims' phones and use their physical payment cards for fraudulent transactions.
Google discusses the evolving role of its Red Teams in the era of agentic security. The piece highlights how autonomous systems and AI-driven threats require red teams to adapt their methodologies and maintain cutting-edge security operations.
Cisco Talos uncovered the JWR phishing framework, which impersonates major payment platforms and steals sensitive data via real-time operator control. The framework shares similarities with 'The Outsider' PhaaS platform and has been deployed in SMS-based campaigns across Southeast Asia and the Middle East.