PCMag on MSN

FBI warns about North Korean hackers adding malicious QR codes to emails

Think before you scan. The FBI says a hacking group known as Kimsuky is targeting 'US entities' with emails that contain ...
American Hospital Association

FBI warns of attacks by North Korean cyber threat group using malicious QR codes

The FBI Jan. 8 released an alert on evolving threat tactics by Kimsuky, a North Korean state-sponsored cyber threat group. As of last year, the group has targeted research organizations, academic ...
The Hacker News

FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing

FBI warns Kimsuky hackers linked to North Korea are using malicious QR codes to bypass MFA, steal session tokens, and hijack cloud accounts.
SiliconANGLE

Malicious QR code hacking campaign is targeting Microsoft credentials

QR codes are arguably one of the most ubiquitous technologies of the third decade of the 21st century, following the lead from China, where they’ve mostly replaced cash in everyday transactions. The ...
SiliconANGLE

New repository aims to illuminate open-source package vulnerabilities and malicious code

The Open Source Security Foundation today launched its Malicious Packages Repository, an open-source system for collecting and publishing cross-ecosystem reports of malicious packages. Claimed to be ...
Hosted on MSN

Hackers are using malicious code to take over legitimate banking apps and your phone — don't fall for this

Hackers are taking legitimate banking apps and decompiling them in order to add malicious code, then spreading them through common threat schemes like phishing lures and fake look-a-like websites.
AFCEA

Keeping Malicious Code at Bay

Changing threats, technologies redefine notions of network security. Research is extending the boundaries of information assurance technology to include the operational reliability of individual ...
Engadget

Hackers injected malicious code into several Chrome extensions in recent attack

Hackers were reportedly able to modify several Chrome extensions with malicious code this month after gaining access to admin accounts through a phishing campaign. The cybersecurity company Cyberhaven ...
Threat Post

Malicious PyPI Code Packages Rack Up Thousands of Downloads

The Python code repository was infiltrated by malware bent on data exfiltration from developer apps and more. Three malicious packages hosted in the Python Package Index (PyPI) code repository have ...
Bleeping Computer

Malicious web redirect scripts stealth up to hide on hacked sites

Security researchers looking at more than 10,000 scripts used by the Parrot traffic direction system (TDS) noticed an evolution marked by optimizations that make malicious code stealthier against ...
Threat Post

Malicious npm Code Packages Built for Hijacking Discord Servers

The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases. A series of malicious packages in the Node.js package manager (npm) code ...