Cyber Attacks
Hirudo RAT Replaces Eight Indonesian Banking Apps With Malicious Clones
The Android trojan tricks users into uninstalling legitimate financial apps to install modified versions that bypass security checks and steal credentials.
Cyber Attacks
Cyber Attacks coverage from Firewall Scoop holds 39 articles, 19 of them reference guides. The newest was published on October 22, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include UK National Cyber Security Centre and OWASP Foundation.
Cyber Attacks
DHS Mandates Removal of DeepSeek AI and Affiliates From Civilian Federal IT
Homeland Security orders civilian agencies to purge DeepSeek tools and halt purchases, citing national security risks and data tracking concerns.
Cyber Attacks
Tech Giants Block eMudhra Certificates Linked to 8 Compromised Keys
Major technology companies have blocked certificates from Indian CA eMudhra after discovering eight private keys were compromised, according to Dark Reading.
Cyber Attacks
2 Phishing Domains Mimic Google Meet to Steal 2FA Codes; Exposed DB Passwords Aid Attackers
Threat intelligence reveals two domains hosting phishing pages that mimic Google Meet to harvest login details and two-factor authentication codes from users.
Cyber Attacks
65 Whitepapers Detail Pentagon's ECHOTRIBBLE AI Plan to Neutralize Threats in Air-Gapped Networks
Public documents reveal a Pentagon plan to develop an agentic AI framework designed to navigate infrastructure and neutralize threats across connected and isolated networks.
Cyber Attacks
3 Tampering Windows: Malwarebytes Identifies AOMEI Backdoor Push via Compromised Updates
Compromised update infrastructure pushed malware to AOMEI Backupper users during brief tampering windows in April through July.
Cyber Attacks
33% of Q3 phishing targets Microsoft: Credentials unlock corporate environments
Check Point data shows Microsoft accounted for nearly a third of all brand impersonation attempts in the third quarter, far outpacing Apple and Google.
Cyber Attacks
2 Credential Stealings: Fake WatchGuard Site Forces Re-Entry Before Serving Signed VPN Installer
Huntress found a phishing domain that harvested VPN login details twice before delivering the genuine, signed installer to unsuspecting users.
Cyber Attacks
SideCopy Group Uses LNK Shortcuts to Install ReverseRAT on Windows Systems
Indian authorities warn that the SideCopy hacker group targets organizations with phishing emails that deploy a medium-severity remote access tool via malicious shortcuts.
Cyber Attacks
143 Devices Compromised in Global Proxyjacking Campaign Using Legitimate App
Attackers installed Pawns.app on edge devices across 34 countries to monetize stolen bandwidth through a commercial residential proxy network.
Cyber Attacks
European Bank Breach Exposed by Third-Party VPN Gaps and Brute-Force Attacks
Palo Alto Unit 42 reports how an opportunistic attacker used weak identity controls and noisy scanning to compromise a European bank's internal systems before being contained.
Cyber Attacks
Law enforcement disrupts network behind 1 billion phishing messages
Global takedown hits infrastructure supplying phishing kits and compromised cloud accounts to criminals targeting organizations worldwide.
Cyber Attacks
Man-in-the-Middle Attacks: How They Work and How to Stop Them
Attackers intercept your data in transit by inserting themselves between two parties who believe they are communicating directly.
Cyber Attacks
Spear Phishing Prevention Checklist for Secure Operations
Automated email filters miss context-heavy attacks, so human verification of delivery channels remains the only reliable defense against targeted social engineering attempts.
Cyber Attacks
Vendor Email Compromise: Detect, Prevent, and Recover from Attacks
Attackers mimic trusted suppliers to bypass financial controls, using subtle domain variations and social engineering to trick staff into paying fake invoices.
Cyber Attacks
7 Phishing Mistakes That Bypass Your Defenses
Most phishing failures occur because users ignore protocol mismatches and accept default browser behaviors that hide the true sender identity behind cosmetic labels.
Cyber Attacks
What Is Intrusion Prevention: How IPS Stops Attacks Before They Land
Intrusion prevention systems actively block malicious traffic in real time, offering a layer of defense that firewalls alone cannot provide by inspecting packet contents.
Cyber Attacks
Are Password Managers Worth It? A Security Breakdown
Password managers protect your data from server breaches but create a single point of failure that requires strict master password hygiene and device security.
Cyber Attacks
IP Spoofing Prevention Checklist: Stop Source Address Forgery
Most network defenses assume incoming packets are honest, allowing spoofed addresses to bypass perimeter checks and mask the true origin of an attack.
Cyber Attacks
$30M Crypto Target: GTA 6 Leaker Threatens Full Build, Take-Two Seeks Subpoenas for ID
The hacker behind recent Grand Theft Auto 6 leaks has threatened to release a full playable build if their cryptocurrency reaches a specific valuation.
Cyber Attacks
GhostProfile macOS Malware Clones Browser Profiles for Remote Access
A new macOS implant creates hidden browser clones to steal live sessions, bypassing screen mirroring to control accounts covertly.
Cyber Attacks
The Gentlemen Claims Breach of MoneyGram, Cites 46 Financial Targets This Year
Ransomware group The Gentlemen asserts it accessed MoneyGram systems, though the payment firm has not confirmed the incident or released any stolen data samples for verification.
Cyber Attacks
US Agencies Warn of 58-Page Threat Report Linking ITG to China-Backed Attacks
Federal agencies issued a detailed advisory warning that Chinese-linked actors use Integrity Technology Group to target critical infrastructure and steal data.
Cyber Attacks
Cloudflare Drives 54% of Top Sites to Use Post-Quantum Cryptography
F5 Labs research shows CDN providers are enabling post-quantum key exchange for most major websites, masking lower internal enterprise adoption rates.