⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article details a spear-phishing campaign targeting a law firm that uses a Go-based loader called HollowFrame and a Rust-based backdoor named Matryoshka. The attack begins with a malicious LNK file disguised as case documents, leading to privilege escalation and payload delivery.
This article warns about scam websites offering fake Fortnite rewards, such as V-Bucks or locker value calculators, that redirect users to fake Epic Games login pages. These sites steal usernames and passwords, which criminals use to hijack accounts, make purchases, or sell them.
Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs. One version promises $50 from a fake superhero collaboration.
Scammers are targeting Fortnite players with fake reward offers, such as $50 collaborations or locker valuation tools, to steal Epic Games account credentials. These phishing sites redirect users to fake login pages, tricking them into handing over their usernames and passwords.
Bitsight discovered that cheap Android TV boxes ship with apps that rewrite their hardware identity to mimic popular phone brands and click ads. The operation, named Fuyao, also uses the boxes as proxies, attributed to Zhejiang Fengwo IoT Technology Co., Ltd.
Cheap Android TV boxes, particularly the H96_MAX_V11 model, have been found to secretly mimic smartphones from brands like Samsung, Huawei, Xiaomi, and Vivo while engaging in ad fraud and proxy traffic relay. Researchers at Bitsight linked the operation, dubbed Fuyao, to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company.