Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. GreedyBear Steals $1M in Crypto Using 150+ Malicious Firefox Wallet Extensions
Published: 2025-08-08
A campaign named GreedyBear used over 150 malicious Firefox extensions to impersonate popular cryptocurrency wallets like MetaMask and TronLink, stealing more than $1 million in digital assets. The attackers employed a technique called Extension Hollowing to bypass Mozilla’s safeguards and exploit user trust.
2. RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes
Published: 2025-08-08
Sixty malicious packages targeting RubyGems, active since at least March 2023, posed as automation tools for social media and other services to steal credentials, with over 275,000 downloads. The packages, linked to aliases like zon and kwonsoonje, prompted security changes due to their widespread impact.
3. Leaked Credentials Up 160%: What Attackers Are Doing With Them
Published: 2025-08-08
Leaked credentials accounted for 22% of breaches in 2024, with a 160% increase in 2025 compared to the previous year, according to Cyberint’s report. These credentials are exploited for unauthorized access, often initiating breaches through simple login attempts rather than advanced attacks.
4. AI Tools Fuel Brazilian Phishing Scam While Efimer Trojan Steals Crypto from 5,000 Victims
Published: 2025-08-08
A campaign uses AI-powered tools like DeepSite AI to create phishing pages mimicking Brazilian government agencies, tricking users into PIX payments via SEO poisoning. The Efimer Trojan is also stealing cryptocurrency from over 5,000 victims as part of this financially motivated activity.
5. SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others
Published: 2025-08-07
SocGholish malware, also called FakeUpdates, is distributed via Traffic Distribution Systems like Parrot TDS, masquerading as browser updates to establish initial access, which is then sold to cybercriminals including LockBit and Evil Corp. The malware operates as a Malware-as-a-Service model, attributed to the TA569 threat actor.
6. Koreans Hacked, Blackmailed by 250+ Fake Mobile Apps
Published: 2025-08-08
A large number of counterfeit Korean mobile apps are embedding spyware, leading to personal and disturbing extortion attempts against users.
7. African Orgs Fall to Mass Microsoft SharePoint Exploits
Published: 2025-08-08
Several African organizations, including South Africa’s National Treasury, have been compromised by mass exploits targeting on-premises Microsoft SharePoint servers, affecting multiple nations.
8. Efimer Malicious Script Spreads via WordPress Sites, Torrents, and Email in Massive Attack Wave
Published: 2025-08-08
Kaspersky researchers have uncovered a widespread campaign involving the Efimer malicious script, a sophisticated Trojan-dropper primarily aimed at stealing cryptocurrency. It spreads through WordPress sites, torrents, and email in a massive attack wave.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor and protect your digital assets. Stay safe online!