PipeMagic malware exploits a Windows vulnerability in ransomExx attacks.

Cybersecurity experts have revealed that hackers targeting Android devices have changed tactics to bypass security measures. Malware previously used primarily to empty bank accounts is now disguised as fake official government or banking applications, using methods like stealing SMS messages and spying on devices. The main goal behind this shift is to silently bypass Google's stringent security scans.

Hackers are employing a highly cunning tactic to evade security systems. New generation malware doesn't request any suspicious or dangerous permissions during initial installation. Instead, they present the user with a seemingly innocent, fake "update" screen. The moment the user clicks this button, the actual spyware is secretly downloaded and activated in the background, obtaining all the necessary permissions to take control of the device.

Despite operating system security warnings, users' careless approvals leave devices completely vulnerable to cybercriminals. Some recently discovered viruses not only steal sensitive data but also secretly mine cryptocurrency in the background, straining the device. Furthermore, attackers continue to exploit cryptocurrency and banking addiction by luring thousands into their networks through fake financial and stock market app advertisements on platforms like Facebook.

Some of the precautions we need to take to protect against these types of attacks include:

• Do not open emails from untrusted sources.

• Use multi-factor authentication (MFA).

• Keep your system updated to the latest version at all times.

• Monitor login logs regularly.

• Track the security of mobile devices.

  
  

For detailed information, you can reach out to our experts at info@zerosecond.ae