The North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new findings from the AhnLab Security Intelligence Center (ASEC).The attacks commence with phishing emails containing a Windows shortcut (LNK) file thats disguised as a Microsoft Office or PDF document. https://thehackernews.com/2025/02/north-korean-apt-kimsuky-uses-lnk-files.html

A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apples and Googles respective app stores to steal victims mnemonic phrases associated with cryptocurrency wallets. The attacks leverage an optical character recognition (OCR) model to exfiltrate select images containing wallet recovery phrases from photo libraries to a command-and-control (C2) server, https://thehackernews.com/2025/02/sparkcat-malware-uses-ocr-to-extract.html

A Russian-speaking cybercrime gang known as Crazy Evil has been linked to over 10 active social media scams that leverage a wide range of tailored lures to deceive victims and trick them into installing malware such as StealC, Atomic macOS Stealer (aka AMOS), and Angel Drainer.Specializing in identity fraud, cryptocurrency theft, and information-stealing malware, Crazy Evil employs a https://thehackernews.com/2025/02/crazy-evil-gang-targets-crypto-with.html

The maintainers of the Python Package Index (PyPI) registry have announced a new feature that allows package developers to archive a project as part of efforts to improve supply chain security.Maintainers can now archive a project to let users know that the project is not expected to receive any more updates, Facundo Tuesca, senior engineer at Trail of Bits, said.In doing so, the idea is to https://thehackernews.com/2025/02/pypi-introduces-archival-status-to.html

Brazilian Windows users are the target of a campaign that delivers a banking malware known as Coyote.Once deployed, the Coyote Banking Trojan can carry out various malicious activities, including keylogging, capturing screenshots, and displaying phishing overlays to steal sensitive credentials, Fortinet FortiGuard Labs researcher Cara Lin said in an analysis published last week.The https://thehackernews.com/2025/02/coyote-malware-expands-reach-now.html

As many as 768 vulnerabilities with designated CVE identifiers were reported as exploited in the wild in 2024, up from 639 CVEs in 2023, registering a 20% increase year-over-year.Describing 2024 as another banner year for threat actors targeting the exploitation of vulnerabilities, VulnCheck said 23.6% of known exploited vulnerabilities (KEV) were known to be weaponized either on or before https://thehackernews.com/2025/02/768-cves-exploited-in-2024-reflecting.html

This week, our news radar shows that every new tech idea comes with its own challenges. A hot AI tool is under close watch, law enforcement is shutting down online spots that help cybercriminals, and teams are busy fixing software bugs that could let attackers in. From better locks on our devices to stopping sneaky tricks online, simple steps are making a big difference. Let’s take a https://thehackernews.com/2025/02/thn-weekly-recap-top-cybersecurity.html