Popular Python AI library Ultralytics was compromised in versions 8.3.41 and 8.3.42, deploying cryptocurrency mining malware through a GitHub Actions Script Injection vulnerability. The attack occurred post-code review, with malicious code injected during the build process. The compromised...
A Nebraska man pleaded guilty to a $3.5M cryptojacking scheme where he defrauded major cloud providers using shell companies to mine cryptocurrencies. Operating as "CP3O," he mined nearly $1M in various cryptocurrencies, laundered proceeds through exchanges and NFT marketplaces, and faces ...
A South Korean manufacturing company was caught producing satellite receivers with hidden DDoS attack capabilities, leading to arrests and asset seizures. The operation, spanning from 2017, involved 240,000 devices with pre-installed or firmware-updated attack modules, commissioned by a fo...
McAfee Labs discovers SpyLoan malware in Android apps with over 8 million downloads, targeting users in Latin America, Africa, and Asia. These predatory loan apps secretly collect sensitive user data, including system information, camera access, and personal details, which are then used fo...
Operation HAECHI-V, a multinational cybercrime crackdown spanning 40 countries, led to 5,500 arrests and seized $400 million in assets. The operation dismantled a major voice phishing syndicate responsible for $1.1 billion in losses, identified new cryptocurrency scams, and demonstrated th...
