More than 80 malicious apps were discovered lurking on Google's official Play Store that were designed to hijack credentials for VK, the Facebook-like Russian social network.
The threat actors even provide instructions on how to download and use the Tor browser to access the payment site.
Numerous companies and websites have been found running similar code on their own sites to covertly generate digital currencies as an alternative to advertising.
A Google researcher had teased the release of the exploit last week, inflaming the infosec community about the potential uses of the tool.
Konstantin Kozlovsky said he began cooperating with the FSB back in 2008 at the age of 16 and "did everything that they said".
"This experience of searching and finding passwords within this database is as scary as it is shocking," researchers said.
A Russian-speaking hacking group – dubbed "MoneyTaker" – has covertly stolen up to $10 million from global banking targets in under two years, new research suggests.
Dashlane has listed some of the government officials, major companies and notable figures that suffered the most embarrassing password-related gaffes this year.
The Vietnamese hacker has previously compromised numerous Vietnamese websites including those of telecom firms, banks and an online military newspaper.
Several popular websites and their software have already been found to be targeted by the StrongPity group.
The week in cybersecurity was largely dominated by cryptocurrency. That's unsurprising, given that bitcoin spiked in value, reaching $17,000 at one point.
The trojan's varied capabilities include disabling the light indicator on the webcam and even triggering the Blue Screen of Death if anyone tries to shut down the process.
The critical remote code execution flaws have not been exploited in the wild and Microsoft has already issued a patch for them.
From the Star Wars BB-8 toy to smart-tracking watches for children, new cybersecurity research suggests that some products under the Christmas tree this year can easily be hacked.
From Anthem and Chipotle to Equifax and Uber, this year saw several data breaches and leaks.
A Google security researcher tweeted about dropping a powerful iOS 11 tool, which the infosec community reportedly suspects may allow a full iPhone jailbreak.
The then-Uber CEO Travis Kalanic was reoprtedly aware of the breach and the bug bounty payment, which was made in November 2016.
Major banking applications used by HSBC, NatWest and Co-op had potential to let hackers steal usernames and passwords of account holders.
The state-sponsored hackers used Israeli-made spyware to spy targets residing in the US, Canada, UK, Germany, Australia, India and others.
Hackers have reportedly threatened to leak more explicit photos of the wrestler in an upcoming Fappening-like leak.
"If they can't cope with a few naked bums, then frankly that's quite sad," Angus Malcolm, producer and photographer of the Warwick Rowers calendar, said.
The data leak is caused by the website's flawed default security settings, leaving users vulnerable to blackmail and hacking.
As cryptocurrency continues to grow exponentially in popularity and value, this isn't the first time hackers have targeted a digital currency platform
Experts raised serious questions about why a virtual keyboard app would need to collect such detailed and personal information that has nothing to do with its functionality.
Europol, the FBI and other European law enforcement authorities recently took down the massive Andromeda malware botnet that has been active since 2011.
Satori can also exploit a recently discovered zero-day flaw, which the botnet has already used to infect two widely-used home routers.
The malware called "Troubleshooter" infects a targeted device and displays the infamous, nerve-rattling BSOD to unsuspecting users.
Konrads Voits used classic phishing, social engineering techniques and malware to carry out the attack over several months.
The San Francisco-based firm leaked data such as internal builds of numerous clients including NFL, CBS, Amex, NBA, FOX, PGA and more.
Over the past six months, the Andromeda botnet has been detected or blocked on an average of nearly 1.1 million machines a month.