NewApp Digest
search bot

cyber attacks

Thousands of hacked sites trick you into installing malware
Tech Optimizer
September 21, 2026

Thousands of hacked sites trick you into installing malware

More than 5,400 websites across over 2,200 organizations have been compromised to propagate malware, primarily affecting small businesses like clinics and online retailers. The attack mechanism involves malicious code that triggers a deceptive CAPTCHA, instructing users to execute commands that can download malware. Attackers are using the BNB Smart Chain test network to store instructions, making it harder for investigators to shut down operations. A newer variant of the attack uses WebRTC technology to establish encrypted connections for delivering additional malicious code. To protect against these threats, users should avoid pasting commands from websites, be suspicious of unusual CAPTCHA instructions, use strong antivirus protection, keep systems updated, take action if commands are executed, and small business owners should regularly verify their website's integrity.
Your Outdated Antivirus Might Be The Weakest Link
Tech Optimizer
August 17, 2026

Your Outdated Antivirus Might Be The Weakest Link

Antivirus software is essential for protecting devices from cyber threats, but simply installing it is not enough. Outdated antivirus software can lead to diminished protection, as it may not recognize new forms of malware, leaving devices vulnerable. The functionality of antivirus programs can also decline over time, limiting their effectiveness. Using outdated software increases the risk of data breaches, as cybercriminals often target these systems. Additionally, technical support for older versions may become unavailable, further exposing users to threats. Keeping antivirus software updated is crucial for maintaining security and accessing the full range of features.
Kaspersky Research: Gen Z is the Most Active Internet User, but Minimal Cyber Protection
Tech Optimizer
August 9, 2026

Kaspersky Research: Gen Z is the Most Active Internet User, but Minimal Cyber Protection

Generation Z is the most engaged demographic online, with 57 percent spending more time in the virtual realm than in the physical world. Smartphones are the primary tool for this generation, with 67 percent using them to access the internet. While 59 percent feel confident navigating the digital landscape, only 27 percent use antivirus software on their mobile devices. More than half (52 percent) have experienced cyber attacks, with 17 percent reporting hacking incidents on social media and 12 percent losing access to gaming accounts. Kaspersky recommends that Gen Z implement comprehensive security solutions, consider using a password manager, and utilize a trusted VPN for added online security.
Alert warns of cyber actors using Telegram messaging app to push malware 
AppWizard
March 25, 2026

Alert warns of cyber actors using Telegram messaging app to push malware 

The FBI issued an alert on March 20 about a sophisticated cyber technique linked to the Iranian government, using the Telegram app to distribute malware globally. This has led to data breaches and reputational damage for many victims. The FBI provided recommendations for organizations and individuals to enhance cybersecurity, including staying informed about cyber threats, implementing security protocols, and educating employees on suspicious communications. Contacts for further insights at the AHA include John Riggi and Scott Gee, with resources available at aha.org/cybersecurity.
China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware
Winsage
December 18, 2025

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

A newly identified cyber threat cluster called LongNosedGoblin has been linked to cyber espionage attacks targeting governmental entities in Southeast Asia and Japan, with activities traced back to at least September 2023. The group uses Group Policy to spread malware and employs cloud services like Microsoft OneDrive and Google Drive for command and control. Key tools include NosyHistorian, NosyDoor, NosyStealer, NosyDownloader, and NosyLogger, which perform functions such as collecting browser history, executing commands, and logging keystrokes. ESET first detected LongNosedGoblin's activities in February 2024, identifying malware on a governmental system. The attacks showed a targeted approach, with specific tools affecting select victims. Additionally, a variant of NosyDoor was found targeting an organization in an EU country, indicating a possible connection to other China-aligned threat groups.
Android users urged to delete hundreds of apps immediately in cyber attack warning
AppWizard
November 3, 2025

Android users urged to delete hundreds of apps immediately in cyber attack warning

A new wave of cyber attacks targeting Android users has been identified, involving 224 compromised applications that have collectively amassed over 38 million downloads from the Google Play Store. This threat, named SlopAds by the Satori Threat Intelligence and Research Team, involves sophisticated advertising fraud techniques, including steganography, to generate illicit revenue through harmful ads embedded in apps. Google has removed all compromised applications from the Play Store and will notify users to uninstall them. Users are advised to enable Google’s Play Protect feature to safeguard against malicious applications. Ad fraud not only affects individual users but also undermines trust in the advertising ecosystem.
Search