🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥

Startup Showcase

Premium Content

Try our Valuation Calculator →

News on Medial

This new malware can literally steal your face to use in fraud — Android and iOS devices both affected, so be on your guard

Techradar

Techradar · 1y ago

This new malware can literally steal your face to use in fraud — Android and iOS devices both affected, so be on your guard

A new mobile trojan called GoldPickaxe has been discovered, aiming to steal biometric data and generate deepfakes for hacking mobile banking applications. The trojan, available for Android and iOS, steals facial recognition data, identity documents, and intercepts SMS messages. The group behind the trojan is believed to be GoldFactory, a Chinese-speaking threat actor known for banking trojans. The malware primarily targets individuals in the Asia-Pacific region, with Thailand and Vietnam being the most at risk. The attackers use social engineering to trick victims into granting necessary permissions for the malware to work.

Related News

Millions of low-cost Android devices turn home networks into crime platforms

Arstechnica

Arstechnica · 5m ago

Millions of low-cost Android devices turn home networks into crime platforms

Millions of low-cost Android devices are infected with BadBox malware, turning consumer networks into crime platforms. BadBox, derived from the Triada malware, enables malicious activities like ad fraud and spreading malware. Despite Google's attempts to block such threats, BadBox infections persist, often found pre-installed on devices. The FBI warns users to check their IoT devices for signs of infection and to avoid suspicious low-cost products.

Millions of low-cost Android devices turn home networks into crime platforms

Arstechnica

Arstechnica · 5m ago

Millions of low-cost Android devices turn home networks into crime platforms

The FBI has warned that millions of low-cost Android devices are infected with BadBox malware, turning them into platforms for distributing malware and performing illicit activities. This threat, based on the advanced Triada malware, affects media streaming, in-vehicle entertainment, and video projection devices, many pre-infected at the supply-chain level. Consumers are urged to check devices for infection signs and consider replacing affected models, especially those not certified under Google’s Play Protect security program.

Chinese authorities are using a new tool to hack seized phones and extract data | TechCrunch

TechCrunch · 4m ago

Chinese authorities are using a new tool to hack seized phones and extract data | TechCrunch

Chinese authorities are reportedly using a malware tool named Massistant, developed by Xiamen Meiya Pico, to extract data from seized Android phones, according to cybersecurity firm Lookout. The malware, which operates via forensic extraction, requires physical access to the device. Although there’s no evidence of an iOS version, users in China and travelers are advised to exercise caution as the tool can access messages, images, and more, despite leaving detectable evidence on compromised devices.

Android malware steals payment card data using previously unseen technique

Arstechnica

Arstechnica · 1y ago

Android malware steals payment card data using previously unseen technique

Cybersecurity firm ESET has identified a new Android malware called NGate that uses an infected device's NFC reader to steal payment card data. The malware captures the cards' information and sends it to the attackers, who then duplicate the cards and use them at ATMs or point-of-sale terminals. ESET researchers say this is the first time Android malware with this capability has been seen in the wild. The malware was installed through phishing tactics, with attackers tricking victims into entering personal information through fake banking apps. The NGate campaign in Czech Republic ended in March after arrests were made.

Activision investigating password-stealing malware targeting game players

TechCrunch · 1y ago

Activision investigating password-stealing malware targeting game players

Video game company Activision is investigating a hacking campaign targeting players to steal their credentials. The hackers are utilizing malware to gain access to victims' computers and steal passwords for gaming accounts and cryptocurrency wallets. Activision is working to identify and remediate affected player accounts. It is unclear how the malware spreads, but it may be targeting users with third-party software installed. Regular players of Activision games are currently not believed to be at risk. Activision advises users to change their passwords and enable two-factor authentication if they suspect they have been compromised.

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Arstechnica

Arstechnica · 1y ago

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Hackers are taking advantage of a critical vulnerability in a popular security camera to distribute the Mirai malware. The attacks are directed at the AVM1203 surveillance device by AVTECH, a Taiwanese manufacturer. The vulnerability, which has been present for five years, allows the execution of malicious code. The AVM1203 is no longer supported, so there is no patch available. The Mirai malware enables hackers to control infected Internet of Things (IoT) devices to carry out distributed denial-of-service attacks. Users are advised to replace the affected camera and avoid using default credentials on IoT devices.

Nearly 1 million Windows devices targeted in advanced “malvertising” spree

Arstechnica

Arstechnica · 8m ago

Nearly 1 million Windows devices targeted in advanced “malvertising” spree

Nearly 1 million Windows devices were attacked in a sophisticated malvertising campaign that started in December. The attackers used staged malware to steal login credentials, cryptocurrency, and other data. The campaign involved malicious ads, primarily hosted on GitHub, Discord, and Dropbox. The malware targeted browsers and cloud services for sensitive information, including files associated with cryptocurrency wallets. Microsoft has updated Defender to detect related threats, advising users to stay vigilant against such attacks.

Hundreds of e-commerce sites hacked in supply-chain attack

Arstechnica

Arstechnica · 6m ago

Hundreds of e-commerce sites hacked in supply-chain attack

Hundreds of e-commerce sites were compromised in a supply-chain attack where malware backdoor allowed execution of malicious code on visitor devices. The attack compromised software from vendors Tigren, Magesolution, and Meetanshi, based on Magento, potentially affecting thousands of online shoppers by injecting skimming code to steal payment data. Despite the malware remaining dormant for six years, the breach continues as some vendors still distribute infected software, prompting sites to inspect for infection signs.

Gemini is getting video uploads.

The Verge

The Verge · 5m ago

Gemini is getting video uploads.

Google's Gemini app now allows video uploads for analysis, offering features like clip descriptions and video content Q&A. Although the option hasn't appeared on all devices yet, it is reportedly available for iOS and Android, with no web support. This update follows Google's announcement of other Gemini models. Availability varies, so users may have different experiences accessing the new features.

Russia targets Ukraine with new Android backdoor, intel agencies say

Arstechnica

Arstechnica · 2y ago

Russia targets Ukraine with new Android backdoor, intel agencies say

Western intelligence agencies have identified a new malware called "Infamous Chisel" used by Russia's military intelligence unit to target Ukrainian Android devices. This malware operates over the Tor network, backdooring devices and stealing critical information. It replaces legitimate system components, gaining persistence and the ability to run each time a device restarts. Infamous Chisel collects device information and specific files related to military applications and exfiltrates them to Russian servers using the TLS protocol. The malware appears to lack basic obfuscation techniques, but its ability to collect sensitive data makes it a significant threat.

Trackers

Active Indian VC’s

OG Capital Email

With a hands-on approach, OG Capital aims to invest in over 20 promising...

Accel Partners Email

Early and growth-stage investments in disruptive technology companies with...

Early-stage venture capital firm investing in technology startups in India. Focus on...

Access All Trackers

Startup Showcase Winners

Sept 2025

Your Health, Simplified with Smart Care

An ecosystem for curated creative partnerships

Your Health our Priority.

Enter Ongoing Startup Showcase

Top Users

Trending News on Medial

Yubi Group raises Rs 411 Cr in ne ...

PhysicsWallah lists at Rs 145 wit ...

PhysicsWallah’s growth prospects ...

Download the medial app to read full posts, comements and news.