Tag: banking
-
Kim Jong-un, crypto bros and a $6.3bn heist podcast
North Korea is said to be behind the theft from the crypto exchange Binance. How did they pull it off and what will they do with the money? <strong>Kalyeena Makortoff </strong>and <strong>Jean H Lee</strong> report<a href=”https://www.theguardian.com/profile/kalyeena-makortoff”><br>It was 8pm last Thursday when the panic alarms went off across the crypto world. Binance, the world’s biggest crypto…
-
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t.There’s a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using…
-
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company ENGIE warned customers in France that attackers accessed personal information through a sales tool used by some business partners. The exposed data includes contact details and energy contract information that…
-
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/robot-malware-indian-bank-customers/
-
CyberDakait Hackers Target Indian Banking Users, Compromise 17,960 Android Devices
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted SMS messages, exposing a campaign that combines banking credential theft, remote device control, and cryptocurrency mining. Although their technical implementations differ, Group-IB clusters them together because of overlapping distribution methods, phishing…
-
Bank of America kindly asks that you don’t share your banking password with your AI assistant
The banking giant reminds customers that “you’re responsible for activity” resulting from your AI agents’ access. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/27/bank-of-america-kindly-asks-that-you-dont-share-your-banking-password-with-your-ai-assistant/
-
AI-Generated Fake Bank Calls and NFC App Enabled Euro380,000 Fraud, Dutch Police Say
Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing Euro380,000 in losses. Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to steal bank card…
-
Hackers Use Fake App Updates to Replace Legitimate Banking Apps With Malicious Versions
Hirudo, an Android banking remote-access trojan (RAT) that can steal credentials and remotely control an infected phone. Its most unusual feature is the ability to replace selected genuine banking apps with modified copies designed to interfere with security checks from inside the app itself. Hirudo uses a two-app setup. Victims first install a convincing shopping…
-
Google Cloud Outage in London Disrupts Revolut Banking Services
Google Cloud’s London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this morning, according to Google’s status page, and the disruption didn’t stay contained to infrastructure dashboards. British digital bank Revolut reported a widespread service outage at roughly the…
-
Scammers Turn Legitimate Fintech Platforms Into Phishing Tools to Steal Banking Details
Scammers have weaponized a legitimate spend-management platform to send phishing messages and validate stolen financial credentials, turning trusted payment infrastructure into an operational part of fraud instead of attacking it directly. Group-IB documented the activity within a client environment after the platform reported suspicious payment notifications in late April 2026. According to the supplied research,…
-
Revolut outage disrupts online banking operations worldwide
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/revolut-outage-disrupts-online-banking-operations-worldwide/
-
Ministers must be honest about Russian threat to UK, says former Foreign Office head
Peter Ricketts calls for more resilience in protecting banking, energy and water systems from cyber-assaultsMinisters need to be honest with the British public about the immediate threat posed by Russia, which could soon lead to lives being lost, a former national security adviser has said.Peter Ricketts, who advised David Cameron when he was prime minister,…
-
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent overlay that intercepts interactions inside legitimate Google Pay and MobiKwik interfaces. The findings extend Cyble’s October 2025 investigation, which documented GhostBat spreading through fraudulent mParivahan applications, harvesting banking messages, and stealing UPI PINs through…
-
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud operators increasingly use caller-ID spoofing, fake banking alerts, conversational phishing, and AI-enabled voice impersonation techniques. The company cited a YouGov survey of 4,500 smartphone users across the United States, Canada, and Australia,…
-
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud operators increasingly use caller-ID spoofing, fake banking alerts, conversational phishing, and AI-enabled voice impersonation techniques. The company cited a YouGov survey of 4,500 smartphone users across the United States, Canada, and Australia,…
-
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud operators increasingly use caller-ID spoofing, fake banking alerts, conversational phishing, and AI-enabled voice impersonation techniques. The company cited a YouGov survey of 4,500 smartphone users across the United States, Canada, and Australia,…
-
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud. ThreatFabric researchers detailed a new Android banking trojan called Hirudo that takes a genuinely different approach to defeating banking security. Instead of throwing a fake login screen over the real app, it uninstalls the real…
-
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks/
-
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking First…
-
Starling Bank claims first banking AI trained on UK sovereign cloud
Starling says ‘transactional foundation model’ will train on more than 15 billion anonymised transactions on Civo’s UK cloud but the data tokenises in Google Cloud first First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651839/Starling-Bank-claims-first-banking-AI-trained-on-UK-sovereign-cloud
-
When Banks’ AI Agents Meet Customers’ AI Agents
Agentic Banking Creates Two-Sided Trust Problem Banks are deploying AI agents internally as customers send their own agents to shop, pay and negotiate. With rules on authentication, fraud, liability and reversibility lagging, institutions must decide what agents can do, how to verify their authority and who pays when they get it wrong. First seen on…
-
Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites
A Casbaneiro banking trojan campaign in August 2026 that targeted Latin American users via phishing emails and malicious PDFs disguised as invoices and legal notices. Its defining feature is conditional command-and-control activation: the malware initiates banking-related C2 communication only when victims visit targeted financial websites, making infected systems appear inactive during automated analysis. That restriction…
-
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page itself.ANY.RUN has identified Wazza, a new phishkit targeting banking, manufacturing, and government organizations across the US, Europe…
-
Connected Data Exposes Hidden Third-Party Risk
Moody’s Mohamed Daoud on How AI, Continuous Monitoring Are Changing Risk Detection. As stronger banking controls push illicit activity toward trade and commercial relationships, Moody’s Mohamed Daoud examines how third-party risk is evolving and why enterprises need to look beyond their immediate business relationships. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/connected-data-exposes-hidden-third-party-risk-a-33023
-
SWIFT Banking & Government Middleware Enables RCE
Tags: banking, exploit, government, Hardware, mfa, rce, remote-code-execution, update, vulnerabilityPatch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce
-
Android Malware Turns Gemini AI Into an Assistant for On-Device Attacks
A newly documented Android banking trojan named RATHat is demonstrating how generative AI can be operationalized inside mobile malware. The threat uses Google Gemini models to navigate unfamiliar Android interfaces, while its operator panel applies AI to identify higher-value victims from stolen SMS data. The malware disguises itself as legitimate applications, then relies on social…
-
Private 5G Moves Into Banking at Hana Financial’s 16-Floor Headquarters
Hana Financial’s new headquarters runs private 5G across 16 floors, giving roughly 3,000 employees secure wireless access to internal systems. The post Private 5G Moves Into Banking at Hana Financial’s 16-Floor Headquarters appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-hana-financial-private-5g-apac-south-korea/
-
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy.The console stores what the malware collects…
-
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy.The console stores what the malware collects…
-
RemControl Banking Trojan Gives Attackers Remote Control of Android Devices
The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/banking-trojan-remote-control/