❌

Visualização normal

Antes de ontemCybersecurity News

Cursor Distributed Claude Code Extensions With SSH Backdoor Code

Malicious Claude Code extensions targeted Windows and macOS developers through Cursor collecting device details and planting files for persistent remote access.

Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages

Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s researchers say.

A gift to scammers: why you should probably keep your birthday a secret

Using a fake DOB or leaving the field blank when making an online account can offer protection from identity theft

You get a call from your bank saying there has been suspicious activity on your account. They read out your name, address and date of birth so you are happy it is a legitimate caller.

But you are talking to criminals who have used your date of birth as part of a web of verifying information to convince you they are someone else.

Continue reading...

© Photograph: kmt_rf/Alamy

© Photograph: kmt_rf/Alamy

© Photograph: kmt_rf/Alamy

ADEX: AI Involved in 52% of Detected Ad Fraud Schemes – Shopping Agents Could be Next

New ADEX research shows how AI is making familiar scams cheaper and harder to detect, while fraudsters prepare to target AI shopping assistants.

From Rules to AI and Back 

Fraud prevention combines rules, AI and behavioral analytics to stop scams, reduce false declines and keep automated decisions explainable through human review.

Scanner Poses as 32 AI Bots to Find Credentials and Private Keys

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs

Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.
  • ✇Security Affairs
  • AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say Pierluigi Paganini
    Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to steal bank card data. In just three weeks, the scheme allegedly cost 170 victims around €380,000. “Rotterdam police arrested two suspects accused of a new form of bank-helpdesk fraud. The operati
     

AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say

26 de Outubro de 2026, 12:06

Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses.

Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to steal bank card data. In just three weeks, the scheme allegedly cost 170 victims around €380,000.

“Rotterdam police arrested two suspects accused of a new form of bank-helpdesk fraud. The operation allegedly caused around €380,000 in losses for 170 victims in just three weeks.” NL Times reports. “The suspects allegedly used AI-generated phone calls and a fake banking app to copy victims’ bank cards remotely, allowing accomplices to withdraw thousands of euros. Victims came from across the Netherlands and ranged in age; dozens were in their twenties and thirties.”

The suspects allegedly used AI-generated calls to trick victims into believing their bank accounts were at risk. They then persuaded them to install a fake banking app and scan their bank cards with their phones. The app used NFC to capture card data, which accomplices could use to withdraw money. Victims came from across the Netherlands and included people of all ages, with dozens in their twenties and thirties.

A 23-year-old man from Vaassen, in Gelderland, is suspected of developing the technology and directing the group. A 25-year-old from Ede, also in Gelderland, is suspected of coordinating the operation. On Tuesday, a Rotterdam court ordered both men to remain in custody for at least another 90 days while the investigation continues.

The case started in mid-September, when Dutch banks reported the new fraud through the Electronic Crimes Task Force (ECTF). That’s a partnership of banks, police and prosecutors that shares information and expertise to fight financial and digital crime. Within days of consulting the task force, Rotterdam’s cybercrime team had identified the digital infrastructure used by the group.

Investigators monitored the servers to understand how the operation worked. They traced the people behind the technology, the phone calls made to victims, and the cash withdrawals.

The scam started with a recorded message warning victims about suspicious activity on their bank accounts.

“The callers used artificial intelligence (AI) to produce dozens of recordings featuring different voices, banks, companies, and scenarios. Victims were asked to press 1 if they did not recognize the alleged activity.” states the report. “They were then connected to someone posing as a bank employee.”

The message asked people to press 1 if they did not recognize the activity. They were then connected to someone pretending to be a bank employee. Following a prepared script, the caller pressured them to act quickly and take steps to block their bank cards.

The fake employee told victims to download an app and hold their bank card against the phone to scan it. The criminals presented this as a way to secure the accounts.

If a caller ever asks you to scan your card with an app, hang up and phone your bank on the number printed on the card.

According to police, the app sent data from the card’s near-field communication (NFC) chip, the technology behind contactless payments, to an app run by an accomplice. That person waited at a cash machine or payment terminal and could withdraw thousands of euros without the victim realizing what was happening.

“Police described this technical method as one they had not encountered before.” the report concludes.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, NFC)

  • ✇Cybersecurity News
  • Apple Presto Return Scanner Targets In-Box Fraud Do Son
    Apple deployed an in-box Apple Presto return scanner across retail stores to combat return fraud by running diagnostics on sealed iPhones. Related Posts: Come Back to Firefox Campaign Champions Web Privacy OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3 eMudhra Rogue Certificates Flood Certificate Transparency The post Apple Presto Return Scanner Targets In-Box Fraud appeared first on Daily CyberSecurity.
     
  • ✇Data and computer security | The Guardian
  • Cookie theft: how fraudsters get the digital key to your accounts Hilary Osborne
    ‘Session cookies’ are a primary target for hackers letting them hijack and use your accountsYou’ve had a busy morning of life admin, logging into various accounts to check balances and make payments. At the end of a productive few hours you close your laptop and move on to your next job.What you don’t know is that fraudsters have hijacked your session with the bank and are now able to access your account. You are the victim of cookie theft, which belongs to a type of fraud known as “session hija
     

Cookie theft: how fraudsters get the digital key to your accounts

‘Session cookies’ are a primary target for hackers letting them hijack and use your accounts

You’ve had a busy morning of life admin, logging into various accounts to check balances and make payments. At the end of a productive few hours you close your laptop and move on to your next job.

What you don’t know is that fraudsters have hijacked your session with the bank and are now able to access your account. You are the victim of cookie theft, which belongs to a type of fraud known as “session hijacking”.

Continue reading...

© Photograph: Rawf8/Alamy

© Photograph: Rawf8/Alamy

© Photograph: Rawf8/Alamy

  • ✇Firewall Daily – The Cyber Express
  • Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam Samiksha Jain
    The Federal Trade Commission (FTC) has filed a complaint against GovAssist LLC, Entry LLC and Scott Zuckerman over an alleged government impersonation scheme targeting consumers seeking U.S. passport and travel-related services. The case highlights how paid search advertising, misleading service promises and allegedly fake customer reviews can be used to make commercial websites appear connected to official government services. According to the FTC, the defendants allegedly used websites and sp
     

Fake Reviews, Deceptive Ads: FTC Targets Alleged Passport Scam

23 de Outubro de 2026, 07:27

Government impersonation scheme

The Federal Trade Commission (FTC) has filed a complaint against GovAssist LLC, Entry LLC and Scott Zuckerman over an alleged government impersonation scheme targeting consumers seeking U.S. passport and travel-related services. The case highlights how paid search advertising, misleading service promises and allegedly fake customer reviews can be used to make commercial websites appear connected to official government services.

According to the FTC, the defendants allegedly used websites and sponsored search results to attract travelers, collect personal and financial information, and mislead consumers about the services they would receive. The complaint was filed in the U.S. District Court for the District of Puerto Rico.

How the Government Impersonation Scheme Allegedly Worked?

The FTC alleges that, since at least October 2023, GovAssist, Entry and Zuckerman operated websites including GovAssist.com, Entry.com and IVS.us, offering passport applications, passport-related services, visa applications and visa renewals.

The complaint states that the websites presented themselves as affiliated with the U.S. State Department, although the defendants were neither the federal government nor authorized government-affiliated providers of passport-related services.

The alleged operation relied on paid search ads to reach people looking for official passport information. Searches such as “apply for a new passport,” “passport renewal,” and “passport renewal online” routinely returned IVS.us and Entry.com pages among Google’s top sponsored results, according to the FTC.

This approach allegedly placed commercial services in locations where users might expect to find official government resources. The distinction matters because consumers searching for essential documents may not recognize that a sponsored result belongs to a private company rather than a government agency.

Misleading Passport Service Claims and Hidden Costs

The FTC alleges that the defendants made false promises about what their services could deliver, including claims that they could directly issue U.S. passports. In many cases, consumers allegedly received only a completed passport application that was available for free through the State Department’s website.

The complaint also challenges the companies’ pricing disclosures. Although their advertisements or websites reportedly stated that services started at $89, the FTC alleges that the lowest available price was $119, plus a $29 shipping fee, bringing the total to $148.

Consumers also needed to pay the State Department when submitting their passport applications. According to the complaint, the defendants prominently displayed their own prices while omitting or downplaying the additional government fee, potentially leaving customers unaware that they would have to pay again.

Delivery claims are another part of the case. The FTC alleges that the defendants advertised expedited passport services promising delivery in as little as six to 10 business days or three to four business days. The agency contends these promises were false because the timelines were faster than the quickest expedited service available through the State Department, the only source of U.S. passports.

Fake Reviews and Consumer Trust

The complaint further alleges that the defendants used fake positive reviews to make their services appear legitimate. Their websites reportedly highlighted excellent ratings based on consumer feedback published on Trustpilot and other review platforms.

According to the FTC, those ratings relied on high numbers of fake positive reviews. If established, the allegations would show how misleading reviews can reinforce the credibility created by sponsored search placements, making it harder for consumers to distinguish legitimate services from deceptive offerings.

The alleged combination of deceptive ads and fake reviews is central to the case because consumers may rely on both search rankings and customer feedback when deciding which service to trust.

FTC Alleges Violations of Three Federal Laws

The FTC alleges that the defendants violated the FTC Act, the Impersonation Rule and the Gramm-Leach-Bliley Act. The complaint targets the alleged impersonation of government services, misleading representations about passport processing and pricing, and the use of false consumer reviews.

Zuckerman, identified as the owner and sole member of GovAssist and Entry, allegedly operated the scheme while subject to an FTC order in an earlier, unrelated case involving Support King LLC. That case concerned stalkerware and resulted in a final administrative order addressing data privacy.

The FTC said its staff received assistance from the U.S. Postal Inspection Service, the U.S. Attorney’s Office for the District of Puerto Rico and the U.S. Department of State. The Commission authorized the complaint in a 2-0 vote.

What the Case Reveals About Online Consumer Fraud

The allegations illustrate how consumer fraud can exploit the gap between what users expect from an online search and what a website actually provides. A sponsored result may appear prominently, but its placement does not establish that the service is government-operated or officially authorized.

The case also highlights the role of pricing transparency and review authenticity in online trust. Claims about faster processing, low starting prices, and positive customer experiences can influence purchasing decisions, particularly when consumers need time-sensitive travel documents.

The FTC has emphasized that filing a complaint does not establish that the defendants violated the law. The case will be decided by the court.

For consumers, the allegations underscore the importance of distinguishing official government services from third-party providers and checking fees, processing claims, and reviewing credibility before sharing personal or financial information. The FTC also states that it will never demand money, threaten consumers, instruct them to transfer money, or promise them a prize.

Cloudflare
Verify you are human

loading

Checking your browser before accessing this site.
Click to verify →
Then you will be redirected to the requested content.
Ray ID: 8f3a2c1b9d4e5f6a · Performance & security by Cloudflare

site-verification-ok

Cloudflare
Verify you are human
loading
Checking your browser before accessing this site.
Click to verify →
Then you will be redirected to the requested content.
Ray ID: 8f3a2c1b9d4e5f6a · Performance & security by Cloudflare

site-verification-ok

Operation Serengeti III Nets 1,462 Arrests and $105M in Cybercrime Crackdown

INTERPOL’s Operation Serengeti III targeted cybercrime in 21 African countries, recovering over $105 million and identifying 65,929 victims…
  • ✇Cybersecurity News
  • EU Opens Booking.com DSA Investigation Over Fake Listings and Phishing Scams Do Son
    The EU's Booking.com DSA investigation targets fake listings, Booking.com phishing scams and hidden ads. Fines could hit 6% of global turnover. Related Posts: Claude Duet AI Agent Takes On OpenAI Dots and Muse Gemini in Apple CarPlay Arrives on Google Maps Chrome ClickFix Protection Scans Risky Clipboard Commands The post EU Opens Booking.com DSA Investigation Over Fake Listings and Phishing Scams appeared first on Daily CyberSecurity.
     

Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge

Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.
  • ✇Cybersecurity News
  • Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests Do Son
    A scam crackdown on West Africa scam centers by Meta, tech firms and police removed 3.7M accounts, led to 28 arrests and freed 117 victims. Related Posts: DOJ Charges Engineer After OpenAI Recording Device Arrest DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies Ivanti Connect Secure Zero-Day Chain CVE-2026-104935 Exploited by UTA0576 to Gain Root Access The post Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests appeared firs
     

Kerala Police Signs MoU With Cyble to Use Threat Intelligence in Cybercrime Probes

12 de Outubro de 2026, 05:34

Kerala Police Signs MoU With Cyble

A new Kerala Police MoU will bring threat intelligence into cybercrime investigations in the state. Cyble, an AI-native cybersecurity company, has signed a three-year Memorandum of Understanding with Kerala Police that covers intelligence support, investigative assistance and capacity building. The agreement was signed through Cyble's Indian subsidiary, Cyble Infosec India Private Limited. It will support the Kerala Police Cyber Operations wing and Cyberdome in identifying and investigating emerging cyber threats. The announcement was made on October 12, 2026.

Why the Kerala Police MoU Focuses on Threat Intelligence

According to Cyble, cybercriminals increasingly use underground online forums and illicit marketplaces to trade stolen credentials, distribute leaked data, coordinate ransomware operations and facilitate fraud. Identifying these activities before they cause harm requires timely intelligence and effective collaboration between technology providers and law enforcement agencies. [caption id="attachment_114716" align="aligncenter" width="600"]Kerala Police MoU Image Source: Cyble[/caption]

What MoU Covers

Under the MoU, Cyble will support Kerala Police with intelligence relevant to cybercrime investigations. This includes compromised credentials, ransomware activity, data leaks, phishing and fraud infrastructure, and the impersonation of government and police brands. The collaboration has three other parts:
  • No-cost evaluation access to select Cyble platforms.
  • Training for police officers in open-source intelligence (OSINT) and dark web investigations.
  • Joint research into emerging threats such as AI-enabled fraud, deepfakes, mule account networks and investment scams.
Public awareness initiatives will also form part of the collaboration. “Effective cybercrime investigations require timely intelligence, especially when criminal activity originates across borders and moves through hidden online networks,” said Beenu Arora, Co-Founder and CEO of Cyble. “Kerala Police has taken a proactive approach to cyber policing through Cyberdome. Through this collaboration, we aim to help investigators access relevant threat intelligence, strengthen their investigative capabilities, and better understand emerging threats targeting citizens and institutions.” Ankit Asokan, IPS, Kerala Police, said: “Cybercrime investigations increasingly require access to timely intelligence on threats that may originate beyond conventional online channels. This collaboration will support Cyberdome and our officers with relevant intelligence, strengthen investigative capabilities, and contribute to efforts to protect citizens from evolving cyber threats.”

Aim of the Kerala Police MoU

The MoU reflects a shared focus on strengthening cybercrime response through collaboration, intelligence sharing and knowledge development. By combining Cyble's threat intelligence capabilities with Kerala Police's investigative expertise, the partnership aims to support more informed investigations and improve awareness of emerging cyber risks. Cyble describes itself as an AI-native cybersecurity company that helps governments and enterprises identify, prioritize and respond to cyber threats. It is headquartered in Cupertino, California, and serves customers globally, with offices in regions including Australia, Malaysia, Singapore, the Middle East and India.
❌
❌