Brokewell Android malware spreads through deceptive TradingView ads that push fake apps. Attackers trick victims into installing malicious software that steals sensitive data. Researchers warn the campaign is growing fast, exposing countless devices. How the Campaign Works Cybercriminals buy ads disguised as official TradingView promotions. When users click them, they land on fraudulent websites hosting…
WhatsApp emergency update closes a spyware campaign that targeted iPhone and Mac users. Hackers exploited zero-click flaws to install malware without any clicks. As a result, the case highlights how fast threats evolve and why urgent updates remain essential. How Hackers Exploited the Flaw Attackers abused CVE-2025-55177, a WhatsApp bug on iOS and macOS. By…
YouTubers bust fraud ring in a stunning case that shows how digital creators can fight crime. Two scambaiting YouTubers helped U.S. authorities dismantle a $65 million international scheme that targeted seniors with tech support scams and fake banking calls. Their work highlights how online activism can protect vulnerable communities. The $65 Million Scam The fraud…
The 4chan Kiwi Farms Ofcom case brings global attention to online safety laws. Both platforms are suing the British regulator over age verification rules. Why the Lawsuit Began In June, Ofcom launched investigations into 4chan and Kiwi Farms. The regulator wanted details on how the sites protect UK minors from harmful content. Neither site responded.…
A joint operation between Dutch police and the FBI has dismantled VerifTools, a global marketplace for fake identification documents. The takedown highlights growing cooperation against cybercrime. Servers Seized in Amsterdam On August 27, authorities raided a data center in Amsterdam. Investigators seized two physical servers and 21 virtual machines linked to VerifTools. The operation ended…
The passkey browser vulnerability revealed at DEF CON 2025 shows that attackers can hijack authentication through compromised browsers. The flaw challenges the perception that passkeys offer unbreakable security. How the Attack Works Passkeys rely on private keys stored on devices, unlocked with biometrics or PINs. They are designed to eliminate phishing and password theft. However,…
The Miljödata cyberattack has disrupted services across more than 200 municipalities in Sweden. Miljödata, a critical IT systems supplier, warned that sensitive personal data may have been exposed. Authorities are now racing to assess the impact and restore stability. What Happened The attack hit Miljödata over the weekend, forcing its services offline. The company provides…
Salt Typhoon cyber advisory has been issued by an international coalition of security agencies. The warning highlights how Chinese state-sponsored groups are targeting critical infrastructure worldwide. It details their tactics and offers defenders practical steps to respond. Advisory Overview The joint advisory comes from US agencies including the NSA, CISA, and FBI, alongside Five Eyes…
The Qilin ransomware attack has struck Singer Associates, a major US crisis communications firm. Hackers claim they stole sensitive files and released screenshots of internal strategies. They are now threatening to publish the stolen data unless demands are met. Details of the Attack The Qilin group listed Singer Associates on its leak site, posting excerpts…
Storm-0501 ransomware is evolving. Security researchers report that the group has moved from traditional on-premises infections to cloud-native ransomware campaigns. By exploiting identity misconfigurations and built-in cloud features, the hackers now encrypt data, wipe backups, and extort victims without deploying standard malware. From On-Premises to the Cloud Microsoft notes that Storm-0501, active since 2021, previously…