Author: HackWatchit

Android banking trojan Crocodilus rapidly evolves and goes global Pierluigi Paganini June 03, 2025 A new Android banking trojan called Crocodilus is being used in a growing number of campaigns targeting users in Europe and South America. Crocodilus is a recently discovered Android banking trojan that is quickly gaining ground. What began as small test campaigns has now grown into full-blown attacks targeting users across Europe and South America. It spreads through malicious ads on social media and comes packed with dangerous features, like stealing seed phrases and creating fake contacts for scams. ThreatFabric researchers warn it is also harder…

Malwarebytes launched Scam Guard, an AI-powered digital safety companion that provides real-time feedback on scams, threats and malware alongside digital safety recommendations. Whether it’s a suspicious text, DM, email, image or link, Scam Guard offers judgment-free, personalized advice to help users spot and avoid potential scams. Embedded within the Malwarebytes Mobile Security app, the new feature aims to remove the stigma of shame around scams by helping educate and guide users before it’s too late. The rise in mobile scams has left consumers vulnerable to cybercriminals. New Malwarebytes research uncovered that nearly half of users encounter mobile scams daily, yet…

The internet can be a dangerous place, especially for vulnerable individuals like minors and underage children. According to data from the United Kingdom’s National Society for the Prevention of Cruelty to Children (NSPCC), half of all grooming cases in the country happen online, with Snapchat being a major platform where this takes place. But another growing danger is extremism, with online extremists exploiting minors not just as victims but also as active participants in spreading violent ideologies. To tackle this issue, Europol coordinated a Referral Action Day on May 27, targeting more than 2,000 online links connected to right-wing extremist…

In brief The FDA launched Elsa, an AI platform that reduced one task from three days to six minutes. Elsa summarizes reports, compares drug labels, and identifies high-risk sites while keeping data secure. This marks the first of several AI initiatives as the FDA transforms its internal operations. A scientific reviewer at the U.S. Food and Drug Administration once took three days to complete a task. With a new AI assistant, it now takes six minutes.That’s just one example FDA Commissioner Marty Makary gave Monday as the agency officially launched Elsa, a generative AI platform designed to overhaul how the…

According to the latest advisory by Cert-In, 78 vulnerabilities have been discovered across a broad range of Microsoft products, including Windows, Azure, MS Office, Developer Tools, Microsoft Apps, System Center, Dynamics, and even legacy products receiving Extended Security Updates (ESU). These flaws pose serious security threats, as they can be exploited by attackers to gain restricted access, steal sensitive data, bypass critical security controls, run malicious code remotely, or launch DoS and spoofing attacks. If left unpatched, these high-risk vulnerabilities could severely compromise organizational IT infrastructure and data security. Microsoft Software – High-Risk Vulnerabilities  Out of the 78 flaws, the…

Brian Fehrman // Running into environments where the use of PowerShell is being monitored or is just flat-out disabled? Have you tried out the fantastic PowerOps framework but are wishing you could use something similar via Meterpreter, Empire, or other C2 channels? Look no further! In this talk, Brian Fehrman talks about his new PowerLine framework. He overviews the tool, walks you through how to use it, shows you how you can add additional PowerShell scripts with little effort, and demonstrates just how powerful (all pun intended) this little program can be! See Brian’s slides here: https://www.dropbox.com/s/bvxt8v7d72tdpbr/WEBCAST_061517_slides_PowerLine.pptx?dl=0 Ready to learn more? Level…

opportunities recently to work on the task of evaluating LLM Inference performance, and I think it’s a good topic to discuss in a broader context. Thinking about this issue helps us pinpoint the significant challenges to trying to turn LLMs into reliable, trustworthy tools for even small or highly specialized tasks. What We’re Trying to Do In it’s simplest form, the task of evaluating an LLM is actually very familiar to practitioners in the Machine Learning field — figure out what defines a successful response, and create a way to measure it quantitatively. However, there’s a wide variation in this…

Outdoor apparel retailer The North Face is warning customers that their personal information was stolen in credential stuffing attacks targeting the company’s website in April. The North Face is a major American outdoor apparel and equipment brand owned by VF Corporation that also controls Vans, Timberland, and Dickies. The North Face generates over $3 billion in annual revenue, making it one of the largest outdoor brands in the world, with its e-commerce accounting for approximately 42% of its total sales volumes. Credential stuffing attacks are a type of cyberattack where threat actors attempt to gain unauthorized access to user accounts…

Interactive Brokers is warning customers to be on high alert due to a wave of scams involving fraudsters posing as company representatives. Interactive Brokers (IBKR) is a global brokerage firm that lets investors trade stocks, options, futures, and other assets on international markets. In a message sent to clients on June 2, the company said it is seeing more cases of criminals impersonating its employees, branding, and email addresses in order to trick people into sending money or giving up sensitive information. These scams are sometimes called “clone firm” scams. They involve fraudsters copying the look, feel, and even the…