Over 8 million Android devices have been breached by 15 SpyLoan apps, which use social engineering to gain unwarranted permissions, thereby enabling extortion and data compromise. The activity of these apps increased over 75% between Q2 and Q3. Threat actors are using time-bound offers and countdowns to coax downloads of these predatory loan apps. Despite successful efforts to disrupt the operation, the apps easily adapt and relocate, making it difficult to shut them down.
SmokeLoader Malware Exploits MS Office Flaws to Steal Browser Data
The SmokeLoader malware has launched attacks on Taiwanese industries including healthcare, IT, and manufacturing. The scams start with phishing emails that exploit Microsoft Office vulnerabilities,
