Tag: finance
-
Android adds AI-powered scam alerts, hangs up on bank impostors
Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/16/android-enhanced-built-in-scam-protection/
-
Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month
Tags: china, credentials, cyber, email, finance, fraud, infrastructure, international, malicious, microsoft, phishing, service, theftMicrosoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million malicious emails monthly. The coordinated action targeted a Chinese-speaking fraud ecosystem encompassing related phishing kits, infrastructure providers, and services enabling credential theft and financial fraud. Microsoft and Health-ISAC filed a civil lawsuit in the U.S. District…
-
FTC Demands Answers From OpenAI and Anthropic About AI Safety
The FTC has subpoenaed OpenAI and Anthropic over potential consumer protection violations. An AI security expert explains the risks of enterprise AI agents. The post FTC Demands Answers From OpenAI and Anthropic About AI Safety appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ftc-subpoenas-openai-anthropic-ai-safety/
-
Vibetech Database Exposes 13.7M Records Including ATT and FBI Data
An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including ATT, Casio and FBI data, passwords and bank details. First seen on hackread.com Jump to article: hackread.com/vibetech-database-exposes-att-fbi-data-more/
-
Nach Mythos-Einsatz: Rund 1.000 Externe patchen Code bei Bank of America
Sobald die vom KI-Modell Mythos aufgedeckten Sicherheitsrisiken gepatcht sind, sieht die Bank of America großes Einsparpotenzial. First seen on golem.de Jump to article: www.golem.de/news/nach-mythos-einsatz-rund-1-000-externe-patchen-code-bei-bank-of-america-2610-214156.html
-
Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide
Iron Man System, a commercial phishing-as-a-service platform supplying criminals with ready-made websites impersonating banks, couriers, tax agencies, traffic authorities, and other trusted organizations worldwide. Researchers purchased a license through human intelligence operations and deployed the kit inside an isolated laboratory. Packet captures and configuration analysis connected the working deployment to vendor-controlled infrastructure, providing evidence beyond…
-
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud. ThreatFabric researchers detailed a new Android banking trojan called Hirudo that takes a genuinely different approach to defeating banking security. Instead of throwing a fake login screen over the real app, it uninstalls the real…
-
Bank of America hit with £1.2bn fine after money laundering probe
Bank of America has been fined £1.2bn for its failings related to anti-money laundering First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651843/Bank-of-America-hit-with-12bn-fine-after-money-laundering-probe
-
Löschung inaktiver Konten: Paypal-Warnhinweis verwirrt Nutzer
Paypal-Nutzer erhalten derzeit Hinweise über die Löschung eines inaktiven Kontos. Das ist zwar kein Phishing, aber gerade deshalb verwirrend. First seen on golem.de Jump to article: www.golem.de/news/loeschung-inaktiver-konten-paypal-benachrichtigung-verwirrt-nutzer-2610-214115.html
-
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hirudo-android-malware-replaces-banking-apps-to-evade-security-checks/
-
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking First…
-
Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the operation combined platform enforcement, financial tracing, and physical raids against fraud infrastructure targeting victims worldwide. Meta and…
-
Bank of England and IMF bosses warn of cyber threat to trust in financial system
Kristalina Georgieva says online fraud could lead people to opt out of system and turn to ‘shoeboxes under their bed'<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/14/imf-rising-government-borrowing-costs-inflation-oil-stock-markets-latest-news-updates”>Business live latest updates</li></ul>The heads of the Bank of England and the International Monetary Fund have issued a stark warning that rising cyber-attacks risk undermining trust in the financial system.Speaking on a panel about online…
-
Why Yandex Strikes May Matter for Data Center Alley
Northern Virginia Data Center Operators Lack Authority to Stop Drones. Ukrainian drones hit three Yandex data centers in four days, disrupting Russian cloud services used by banks, telecoms and the national railway. In Northern Virginia’s Data Center Alley, private operators can’t take down drones, and the FAA says it’s a safety regulator, not a security…
-
FTC: Company netted at least $60 million charging sextortion victims for help it didn’t provide
An Ohio-based company charged individuals thousands of dollars to fight sextortion scams, but the operation itself was fraudulent, according to a Federal Trade Commission complaint. First seen on therecord.media Jump to article: therecord.media/sextortion-assistance-company-alleged-fraud-ftc-complaint
-
FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and denied refunds to victims. First seen on cyberscoop.com Jump to article: cyberscoop.com/ftc-lawsuit-dmitry-belkin-sextortion-fraud/
-
Starling Bank claims first banking AI trained on UK sovereign cloud
Starling says ‘transactional foundation model’ will train on more than 15 billion anonymised transactions on Civo’s UK cloud but the data tokenises in Google Cloud first First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651839/Starling-Bank-claims-first-banking-AI-trained-on-UK-sovereign-cloud
-
IMF warns of cyber threat to digitally connected financial markets
Interconnected services plus software from key suppliers and greater digitisation presents a large attack surface for AI-powered attacks First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652153/IMF-warns-of-cyber-threat-to-digitally-connected-financial-markets
-
IMF warns of cyber threat to digitally connected financial markets
Interconnected services plus software from key suppliers and greater digitisation presents a large attack surface for AI-powered attacks First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652153/IMF-warns-of-cyber-threat-to-digitally-connected-financial-markets
-
XWorm HBrowser Plugin Lets Attackers Control Authenticated Browser Sessions Without Credentials
XWorm’s HBrowser plugin gives attackers interactive control of authenticated browser sessions on infected endpoints, allowing them to operate accounts without stealing passwords or completing another multifactor authentication challenge. Researchers recorded 1,236 XWorm detection events across more than 100 customer organizations during Q3 2026, four times the volume observed in Q3 2025. Financial services represented approximately…
-
When Banks’ AI Agents Meet Customers’ AI Agents
Agentic Banking Creates Two-Sided Trust Problem Banks are deploying AI agents internally as customers send their own agents to shop, pay and negotiate. With rules on authentication, fraud, liability and reversibility lagging, institutions must decide what agents can do, how to verify their authority and who pays when they get it wrong. First seen on…
-
WhatsApp-Delivered Malware Injects Into Windows Task Scheduler to Run as SYSTEM
A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler service and executes subsequent payloads with LocalSystem privileges. The executable acts as an NRV2E-compressed wrapper that reconstructs its malicious loader entirely in memory, limiting obvious artifacts on disk and obscuring imports, strings, and control-flow…
-
Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites
A Casbaneiro banking trojan campaign in August 2026 that targeted Latin American users via phishing emails and malicious PDFs disguised as invoices and legal notices. Its defining feature is conditional command-and-control activation: the malware initiates banking-related C2 communication only when victims visit targeted financial websites, making infected systems appear inactive during automated analysis. That restriction…
-
‘You have a meeting’: the calendar phishing scam growing exponentially
Appointment or renewal reminder appears in victims’ calendar to lure them into logging in to fake Google, Microsoft or PayPal pageYou’re preparing for the week ahead and take a look at your Google calendar. There’s an entry for a meeting that you must have completely forgotten. The note that pops up when you click on…
-
ARTEX AI, Claude agents used in cyberattacks on South Korean banks
The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/
-
Q3 2026 Sets New Record for Ransomware Attacks
Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/q3-new-record-ransomware/
-
AI-Driven tool ARTEX used in attacks against South Korean Banks
CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike published a research on a campaign against South Korean financial organizations that ran from late September to early October 2026 and ended with stolen data. The attacker left their working notes…
-
Cryptohack Roundup: Conviction in Uranium Finance Hack
Also: A US Court Orders $30M Penalty in Fundsz Fraud Case. This week, a conviction in a $54 million exploit, a $30 million Fundsz fraud penalty, Near Intents post-hack, Abstract Blockchain will shutdown, Velocity’s victim reimbursements, two U.S. regulatory proposals withdrawn, a ZachXBT North Korean laundering probe and ransomware-linked wallets identified. First seen on govinfosecurity.com…
-
WorkNest Secure Achieves CREST STAR-FS Accreditation for Red Teaming
WorkNest Secure has achieved CREST Simulated Targeted Attack & Response for Financial Services (STAR-FS) accreditation, recognising its ability to deliver intelligence-led red teaming assessments for organisations operating in high-risk and regulated environments. The accreditation confirms that WorkNest Secure meets CREST’s standards for conducting threat-led penetration testing, using realistic attack scenarios to assess how effectively organisations…