The data of approximately 30,000 customers of Australia’s four largest banks was stolen using malware installed on mobile phones and personal computers.

Hackers breached the security of the four banks without the institutions noticing their intrusion, and then dumped this information on dark web forums, according to cybersecurity firm Dvuln.

The specialized firm has indicated that “the breaches affect approximately 14,000 Commonwealth Bank customers, 7,000 ANZ customers, 5,000 NAB customers, and 4,000 Westpac customers. The data was collected over a period of at least four years through malware campaigns targeting personal devices.”

On the other hand, it has emphasized that this is not a breach in the banks’ security systems, “but rather individual infections of users’ phones and computers” using infostealer-type malware.

According to the intelligence firm KELA, “more than 3.9 billion passwords have been stolen using this type of malware globally.”

Experts from KELA and Dvuln have emphasized the need to increase protective measures not only by users, “but also by software developers, governments, and financial institutions, which must adopt more aggressive digital defense strategies.”

M.Pino

Source: diariobitcoin

(Reference image: Mika Baumeister on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Hackers stole banking data of at least 30,000 users in Australia apareció primero en Bitfinance.

A new banking Trojan attacks Android phones silently. It is called Crocodilus and is highly effective because it uses an imperceptible black screen.

The virus makes it easier for cybercriminals by silencing the device to steal banking credentials.

“It targets people in Spain and Turkey, and its success has surprised both banks and cryptocurrency platforms.” The specialists at ThreatFabric were responsible for the discovery, and “it poses a very comprehensive threat because it is equipped with modern techniques such as remote control, black screen overlays, and advanced data collection through accessibility logging, among others.”

The Trojan is installed using a dropper, an executable malware that can bypass restrictions on Android 13 and later. Once installed, it requests the Accessibility Service be enabled for proper operation and “connects to the command server to receive instructions, which include the list of target apps, as well as the interface that will impersonate the legitimate app (overlays) to steal user credentials.”

Crocodilus can perform keylogging, which relies on a keylogger or keystroke log, and thus records on-screen password input. By acting remotely, it facilitates the actions of cybercriminals.

M.Pino

Source: 20minutos

(Reference image source: Denny Müller on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada New Crocodilus trojan attacks Android phones apareció primero en Bitfinance.

Phishing is one of the cyberattack techniques that, along with ransomware, affects thousands of victims around the world. Internet criminals recruit users by impersonating regular sources of information such as banks, government agencies, stores, among others.

People receive messages that appear to be genuine, sent from the real source, usually taking advantage of key dates and events of personal interest to sneak in real offers.

When the user opens these malicious messages or links, cyberattackers enter the system and steal their personal data, bank passwords, bank card numbers.

Among the common recommendations of companies specializing in security and data protection is, firstly, to distrust any email or message that is too provocative, with offers that are apparently impossible to ignore.

In this sense, the first thing would be not to open messages from unknown sources or those that generate suspicion. And even less to download attached files or click on addresses recommended by the message.

On the other hand, keep the passwords of all social networks, banks, cryptocurrency wallets, email, and employment platforms well stored. It is important not to share them electronically and to remember the message from official bodies that they will never request user data through this means.

Stay alert to offers that are too good and be suspicious of any link that could allow a phishing attack.

The use of strong passwords and the periodic updating of programs and applications is another of the valuable recommendations of cybersecurity specialists to keep your personal data and assets away from the clutches of web hackers.

M.Pino

(Reference image source: Maxim Ilyahov on Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Cyberattacks through phishing continue to increase apareció primero en Bitfinance.