CERT24ThreatsDay: 200 Android flaws, browser-built phishing, 119K scam shops and 23 more storiesLoading data…
CERT24Threat Observatory
Period

ThreatsDay: 200 Android flaws, browser-built phishing, 119K scam shops and 23 more stories

The weekly roundup covers malicious browser extensions that stole Axiom Trade and Padre session tokens and wallet data; intrusions automated by a Chinese-speaking operator against government and financial systems; risks from unapproved artificial-intelligence services; wire-fraud schemes using fake mergers and acquisitions; more than 119,000 fake-shop domains; patches for 200 Android vulnerabilities; abuse of Singpass accounts; phishing following a Trezor email-provider breach; more than 33,800 internet-exposed vulnerable Plex servers; and a ransomware attack involving EtherRAT and TukTuk.

← Back to intelligence

ThreatsDay: 200 Android flaws, browser-built phishing, 119K scam shops and 23 more stories

The weekly roundup covers malicious browser extensions that stole Axiom Trade and Padre session tokens and wallet data; intrusions automated by a Chinese-speaking operator against government and financial systems; risks from unapproved artificial-intelligence services; wire-fraud schemes using fake mergers and acquisitions; more than 119,000 fake-shop domains; patches for 200 Android vulnerabilities; abuse of Singpass accounts; phishing following a Trezor email-provider breach; more than 33,800 internet-exposed vulnerable Plex servers; and a ransomware attack involving EtherRAT and TukTuk.