Elastic Security Labs have detected a campaign deploying MEDUSA ransomware via the ABYSSWORKER driver, which disables security systems on targeted machines. The malware appears as a trusted file to security systems due to a signing process possibly using stolen signing material from legitimate sources, allowing it to bypass endpoint detection and response vendors. This highlights increasing advancements in ransomware deployment and demonstrates the need for improvements in digital security strategies.
New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials
Cybersecurity researchers have discovered a new Android banking malware named Crocodilus, targeting primarily users in Spain and Turkey. The malware, designed for device takeover and
