Una campaña de malware está aprovechando mensajes directos de LinkedIn para distribuir archivos maliciosos disfrazados de utilidades legítimas. El ataque explota la técnica de DLL side-loading y la ingeniería social para robar información y controlar sistemas comprometidos. Las redes sociales profesionales como LinkedIn se han convertido en un foco de ataques dirigidos. Recientemente, investigadores de…

The Black Lotus Labs team at Lumen Technologies said it null-routed traffic to more than 550 command-and-control (C2) nodes associated with the AISURU/Kimwolf botnet since early October 2025. AISURU and its Android counterpart, Kimwolf, have emerged as some of the biggest botnets in recent times, capable of directing enslaved devices to participate in distributed denial-of-service…

Security experts have disclosed details of a new campaign that has targeted U.S. government and policy entities using politically themed lures to deliver a backdoor known as LOTUSLITE. The targeted malware campaign leverages decoys related to the recent geopolitical developments between the U.S. and Venezuela to distribute a ZIP archive («US now deciding what’s next…

Meta on Tuesday announced it’s adding Strict Account Settings on WhatsApp to secure certain users against advanced cyber attacks because of who they are and what they do. The feature, similar to Lockdown Mode in Apple iOS and Advanced Protection in Android, aims to protect individuals, such as journalists or public-facing figures, from sophisticated spyware…

Introduction

Under Armour investiga una grave filtración tras el reclamo del grupo Everest, que asegura haber robado 343 GB con datos de 72 millones de registros. La empresa niega la exposición de pagos y contraseñas, pero pide extremar precauciones. A finales de 2025, Under Armour fue víctima de un ciberataque que resultó en la filtración de…