NewApp Digest
search bot

cyber attacks

Your Outdated Antivirus Might Be The Weakest Link
Tech Optimizer
August 17, 2026

Your Outdated Antivirus Might Be The Weakest Link

Antivirus software is essential for protecting devices from cyber threats, but simply installing it is not enough. Outdated antivirus software can lead to diminished protection, as it may not recognize new forms of malware, leaving devices vulnerable. The functionality of antivirus programs can also decline over time, limiting their effectiveness. Using outdated software increases the risk of data breaches, as cybercriminals often target these systems. Additionally, technical support for older versions may become unavailable, further exposing users to threats. Keeping antivirus software updated is crucial for maintaining security and accessing the full range of features.
Kaspersky Research: Gen Z is the Most Active Internet User, but Minimal Cyber Protection
Tech Optimizer
August 9, 2026

Kaspersky Research: Gen Z is the Most Active Internet User, but Minimal Cyber Protection

Generation Z is the most engaged demographic online, with 57 percent spending more time in the virtual realm than in the physical world. Smartphones are the primary tool for this generation, with 67 percent using them to access the internet. While 59 percent feel confident navigating the digital landscape, only 27 percent use antivirus software on their mobile devices. More than half (52 percent) have experienced cyber attacks, with 17 percent reporting hacking incidents on social media and 12 percent losing access to gaming accounts. Kaspersky recommends that Gen Z implement comprehensive security solutions, consider using a password manager, and utilize a trusted VPN for added online security.
Alert warns of cyber actors using Telegram messaging app to push malware 
AppWizard
March 25, 2026

Alert warns of cyber actors using Telegram messaging app to push malware 

The FBI issued an alert on March 20 about a sophisticated cyber technique linked to the Iranian government, using the Telegram app to distribute malware globally. This has led to data breaches and reputational damage for many victims. The FBI provided recommendations for organizations and individuals to enhance cybersecurity, including staying informed about cyber threats, implementing security protocols, and educating employees on suspicious communications. Contacts for further insights at the AHA include John Riggi and Scott Gee, with resources available at aha.org/cybersecurity.
China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware
Winsage
December 18, 2025

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

A newly identified cyber threat cluster called LongNosedGoblin has been linked to cyber espionage attacks targeting governmental entities in Southeast Asia and Japan, with activities traced back to at least September 2023. The group uses Group Policy to spread malware and employs cloud services like Microsoft OneDrive and Google Drive for command and control. Key tools include NosyHistorian, NosyDoor, NosyStealer, NosyDownloader, and NosyLogger, which perform functions such as collecting browser history, executing commands, and logging keystrokes. ESET first detected LongNosedGoblin's activities in February 2024, identifying malware on a governmental system. The attacks showed a targeted approach, with specific tools affecting select victims. Additionally, a variant of NosyDoor was found targeting an organization in an EU country, indicating a possible connection to other China-aligned threat groups.
Android users urged to delete hundreds of apps immediately in cyber attack warning
AppWizard
November 3, 2025

Android users urged to delete hundreds of apps immediately in cyber attack warning

A new wave of cyber attacks targeting Android users has been identified, involving 224 compromised applications that have collectively amassed over 38 million downloads from the Google Play Store. This threat, named SlopAds by the Satori Threat Intelligence and Research Team, involves sophisticated advertising fraud techniques, including steganography, to generate illicit revenue through harmful ads embedded in apps. Google has removed all compromised applications from the Play Store and will notify users to uninstall them. Users are advised to enable Google’s Play Protect feature to safeguard against malicious applications. Ad fraud not only affects individual users but also undermines trust in the advertising ecosystem.
China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats
Winsage
October 31, 2025

China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats

A China-affiliated threat actor, UNC6384, has been conducting cyber attacks targeting diplomatic and governmental entities in Europe, including Hungary, Belgium, Italy, the Netherlands, and Serbia. These attacks exploit an unpatched Windows shortcut vulnerability (CVE-2025-9491) through spear-phishing emails that appear relevant to diplomatic events. The emails deliver malicious LNK files that deploy PlugX malware via DLL side-loading. PlugX is a remote access trojan that allows extensive control over compromised systems and has been linked to another hacking group, Mustang Panda. Microsoft Defender can detect these attacks, and Smart App Control provides additional protection. The LNK file executes a PowerShell command to extract a TAR archive containing a legitimate utility, a malicious DLL, and an encrypted PlugX payload. The size of the malicious artifacts has decreased significantly, indicating ongoing evolution. UNC6384 has also begun using HTML Application files to load external JavaScript for retrieving malicious payloads, aligning with Chinese intelligence objectives regarding European defense policies.
Search