cybercrime/malcode – Lifeboat News: The Blog https://lifeboat.com/blog Safeguarding Humanity Sat, 14 Dec 2024 09:07:19 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.1 Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms https://lifeboat.com/blog/2024/12/iran-linked-iocontrol-malware-targets-scada-and-linux-based-iot-platforms https://lifeboat.com/blog/2024/12/iran-linked-iocontrol-malware-targets-scada-and-linux-based-iot-platforms#respond Sat, 14 Dec 2024 09:07:19 +0000 https://lifeboat.com/blog/2024/12/iran-linked-iocontrol-malware-targets-scada-and-linux-based-iot-platforms

Iranian-linked IOCONTROL malware targets IoT, OT, and SCADA systems with advanced evasion tactics.

]]> https://lifeboat.com/blog/2024/12/iran-linked-iocontrol-malware-targets-scada-and-linux-based-iot-platforms/feed 0 Spain busts voice phishing ring for defrauding 10,000 bank customers https://lifeboat.com/blog/2024/12/spain-busts-voice-phishing-ring-for-defrauding-10000-bank-customers https://lifeboat.com/blog/2024/12/spain-busts-voice-phishing-ring-for-defrauding-10000-bank-customers#respond Sat, 14 Dec 2024 09:06:09 +0000 https://lifeboat.com/blog/2024/12/spain-busts-voice-phishing-ring-for-defrauding-10000-bank-customers

The Spanish police, working with colleagues in Peru, conducted a simultaneous crackdown on a large-scale voice phishing (vishing) scam ring in the two countries, arresting 83 individuals.

Thirty-five of the arrested people were located across Spain, including in Madrid, Barcelona, Mallorca, Salamanca, and Vigo, and another 48 were arrested in Peru.

The leader of the ring was also apprehended in Spain during the 29 simultaneous raids conducted by the cooperating police forces, which also seized cash, mobile phones, computers, and documents.

]]> https://lifeboat.com/blog/2024/12/spain-busts-voice-phishing-ring-for-defrauding-10000-bank-customers/feed 0 AI Agents: Easier To Build, Harder To Get Right https://lifeboat.com/blog/2024/12/ai-agents-easier-to-build-harder-to-get-right https://lifeboat.com/blog/2024/12/ai-agents-easier-to-build-harder-to-get-right#respond Thu, 12 Dec 2024 17:51:31 +0000 https://lifeboat.com/blog/2024/12/ai-agents-easier-to-build-harder-to-get-right

Today, AI agents have evolved to become more modular and sophisticated. Agents like ChatGPT can engage in conversations and assist in a wide range of workflows, including customer service and financial decision-making.

Technologies such as retrieval-augmented generation (RAG) allow AI systems to combine different data sources dynamically, making them more adaptive and helpful in real-world applications. As AI’s influence expands into industries such as finance, healthcare and cybersecurity, it is becoming clear that AI agents are critical components of modern business operations.

Despite the remarkable progress in AI, deploying these systems presents several challenges. One of the primary concerns is the risk of bias embedded in the datasets used to train AI agents. AI systems learn from historical data, which can contain patterns of discrimination that, if unchecked, lead to biased decisions, such as favoring particular groups over others in hiring or lending scenarios.

]]> https://lifeboat.com/blog/2024/12/ai-agents-easier-to-build-harder-to-get-right/feed 0 Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested https://lifeboat.com/blog/2024/12/europol-dismantles-27-ddos-attack-platforms-across-15-nations-admins-arrested https://lifeboat.com/blog/2024/12/europol-dismantles-27-ddos-attack-platforms-across-15-nations-admins-arrested#respond Thu, 12 Dec 2024 12:44:59 +0000 https://lifeboat.com/blog/2024/12/europol-dismantles-27-ddos-attack-platforms-across-15-nations-admins-arrested

PowerOFF dismantles 27 DDoS stresser services, arrests administrators, and exposes CDN/WAF misconfiguration risks.

]]> https://lifeboat.com/blog/2024/12/europol-dismantles-27-ddos-attack-platforms-across-15-nations-admins-arrested/feed 0 Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service https://lifeboat.com/blog/2024/12/secret-blizzard-deploys-kazuar-backdoor-in-ukraine-using-amadey-malware-as-a-service https://lifeboat.com/blog/2024/12/secret-blizzard-deploys-kazuar-backdoor-in-ukraine-using-amadey-malware-as-a-service#respond Thu, 12 Dec 2024 12:44:43 +0000 https://lifeboat.com/blog/2024/12/secret-blizzard-deploys-kazuar-backdoor-in-ukraine-using-amadey-malware-as-a-service

Secret Blizzard has a track record of targeting various sectors to facilitate long-term covert access for intelligence collection, but their primary focus is on ministries of foreign affairs, embassies, government offices, defense departments, and defense-related companies across the world.

The latest report comes a week after the tech giant, along with Lumen Technologies Black Lotus Labs, revealed Turla’s hijacking of 33 command-and-control (C2) servers of a Pakistan-based hacking group named Storm-0156 to carry out its own operations.

The attacks targeting Ukrainian entities entail commandeering Amadey bots to deploy a backdoor known as Tavdig, which is then used to install an updated version of Kazuar, which was documented by Palo Alto Networks Unit 42 in November 2023.

]]> https://lifeboat.com/blog/2024/12/secret-blizzard-deploys-kazuar-backdoor-in-ukraine-using-amadey-malware-as-a-service/feed 0 New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools https://lifeboat.com/blog/2024/12/new-malware-technique-could-exploit-windows-ui-framework-to-evade-edr-tools https://lifeboat.com/blog/2024/12/new-malware-technique-could-exploit-windows-ui-framework-to-evade-edr-tools#respond Thu, 12 Dec 2024 12:44:29 +0000 https://lifeboat.com/blog/2024/12/new-malware-technique-could-exploit-windows-ui-framework-to-evade-edr-tools

Windows UI Automation exploited to bypass EDR tools, enabling data theft, phishing, and app manipulation.

]]> https://lifeboat.com/blog/2024/12/new-malware-technique-could-exploit-windows-ui-framework-to-evade-edr-tools/feed 0 Thousands of children exposed in major data breach — including names, addresses and social security numbers https://lifeboat.com/blog/2024/12/thousands-of-children-exposed-in-major-data-breach-including-names-addresses-and-social-security-numbers https://lifeboat.com/blog/2024/12/thousands-of-children-exposed-in-major-data-breach-including-names-addresses-and-social-security-numbers#respond Wed, 11 Dec 2024 16:35:41 +0000 https://lifeboat.com/blog/2024/12/thousands-of-children-exposed-in-major-data-breach-including-names-addresses-and-social-security-numbers

All it takes is one employee falling for a phishing email.

]]> https://lifeboat.com/blog/2024/12/thousands-of-children-exposed-in-major-data-breach-including-names-addresses-and-social-security-numbers/feed 0 Cleo File Transfer Vulnerability Under Exploitation — Patch Pending, Mitigation Urged https://lifeboat.com/blog/2024/12/cleo-file-transfer-vulnerability-under-exploitation-patch-pending-mitigation-urged https://lifeboat.com/blog/2024/12/cleo-file-transfer-vulnerability-under-exploitation-patch-pending-mitigation-urged#respond Wed, 11 Dec 2024 06:26:29 +0000 https://lifeboat.com/blog/2024/12/cleo-file-transfer-vulnerability-under-exploitation-patch-pending-mitigation-urged

Critical Cleo software flaw exploited en masse; update Harmony, VLTrader, LexiCom to prevent ransomware attacks.

]]> https://lifeboat.com/blog/2024/12/cleo-file-transfer-vulnerability-under-exploitation-patch-pending-mitigation-urged/feed 0 Fake Recruiters Distribute Banking Trojan via Malicious Apps in Phishing Scam https://lifeboat.com/blog/2024/12/fake-recruiters-distribute-banking-trojan-via-malicious-apps-in-phishing-scam https://lifeboat.com/blog/2024/12/fake-recruiters-distribute-banking-trojan-via-malicious-apps-in-phishing-scam#respond Wed, 11 Dec 2024 06:25:54 +0000 https://lifeboat.com/blog/2024/12/fake-recruiters-distribute-banking-trojan-via-malicious-apps-in-phishing-scam

Updated Antidot banking trojan targets Android users via fake job offers, stealing credentials and taking remote control.

]]> https://lifeboat.com/blog/2024/12/fake-recruiters-distribute-banking-trojan-via-malicious-apps-in-phishing-scam/feed 0 Phone Phishing Gang Busted: Eight Arrested in Belgium and Netherlands https://lifeboat.com/blog/2024/12/phone-phishing-gang-busted-eight-arrested-in-belgium-and-netherlands https://lifeboat.com/blog/2024/12/phone-phishing-gang-busted-eight-arrested-in-belgium-and-netherlands#respond Wed, 11 Dec 2024 06:25:37 +0000 https://lifeboat.com/blog/2024/12/phone-phishing-gang-busted-eight-arrested-in-belgium-and-netherlands

Phishing gang arrested in Belgium and Netherlands; Europol seizes luxury goods, cash, and millions stolen.

]]> https://lifeboat.com/blog/2024/12/phone-phishing-gang-busted-eight-arrested-in-belgium-and-netherlands/feed 0