614 matches found
New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials
Cybersecurity researchers have discovered a new Android banking malware called Crocodilus that's primarily designed to target users in Spain and Turkey. "Crocodilus enters the scene not as a simple clone, but as a fully-fledged threat from the outset, equipped with modern techniques such as remot...
The Rise of QR Phishing: How Scammers Exploit QR Codes and How to Stay Safe
QR phishing is on the rise, tricking users into scanning malicious QR codes. Learn how cybercriminals exploit QR codes and how to protect yourself...
Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
Posted by James Forshaw, Google Project Zero Back in 2021 I wrote a blog post about various ways you can build a virtual memory access trap primitive on Windows. The goal was to cause a reader or writer of a virtual memory address to halt for a significant e.g. 1 or more seconds amount of time,...
CVE-2025-24663 WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through = 3.9.25...
CVE-2023-48286
Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through = 2.0.79...
PT-2024-13574 · Stripe · Stripe Payments
Name of the Vulnerable Software and Affected Versions: Tips and Tricks HQ, wptipsntricks Stripe Payments versions through 2.0.79 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. This can...
PT-2024-22291 · Image Access Gmbh · Scan2Net
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The web application is not protected against cross-site request forgery attacks, allowing an attacker to trick users into performing actions on the...
A week in security (November 11 – November 17)
Last week on Malwarebytes Labs: Malicious QR codes sent in the mail deliver malware 122 million people’s business contact info leaked by data broker Advertisers are pushing ad and pop-up blockers using old tricks Scammer robs homebuyers of life savings in $20 million theft spree Temu must respect...
MAL-2024-3814 Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fxvb64 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fxvb64 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3813 Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fxcws34 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fxcws34 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fvcxv5 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3812 Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fvcxv5 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fvcx445 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3811 Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fvcx445 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3810 Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fv655 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in uupdated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-fdff (npm)
--- -= Per source details. Do not edit below this line.=-...