SecureList: Hackers are using fake Google Play pages to spread Android malware in Brazil that turns phones into crypto mining devices (via XMRig) and installs banking Trojans. Some variants target Binance and Trust Wallet, replacing wallet addresses during USDT transfers and enabling remote control and data theft.
BREAKING: American journalist, Jackson Hinkle, has REMINDED soldiers on board the USS Harry Truman that they can conscientiously object orders from their superiors.
"Our cities are falling apart...do better...you do not have to be part of this Satanic anti-human genocidal plan"
🚨 ALERT: Microsoft has discovered a new trojan, StilachiRAT, targeting cryptocurrency wallets in the Google Chrome browser.
The malware attacks 20 different extensions, including MetaMask, Coinbase Wallet, Trust Wallet, OKX Wallet, Bitget Wallet, Phantom, and more.
Having audio issues on your Zoom call? That's not a VC, it's North Korean hackers.
Fortunately, this founder realized what was going on.
The call starts with a few "VCs" on the call. They send messages in the chat saying they can't hear your audio, or suggesting there's an issue where you can't hear them, and play a stock video of a bored VC.
If the target had for it, the next step would've been that they're directed to a new Zoom room. It's a fake link and instructs the target to install a patch to fix their audio/video.
They exploit human psychology -- you think you're meeting with important VCs and rush to fix the audio, causing you to be less careful than you usually are. Once you install the patch, you're rekt.
This threat group has stolen $10s of millions of dollars and others are copying their tactics.
Now you know, so you won't fall for this. If anybody ever tells you to switch conference rooms, create your own secure Google meet room and direct them there, instead of using whatever they suggest.
If you did start installing whatever they told you to, disconnect your computer from the internet, turn it off, immediately contact @_SEAL_Org and we'll help you out.
Note: The founder's voice has been replaced in this video, but the rest is 100% authentic.