IT Security - it-daily.net - Daily relevant IT news for decision-makers

New variants of SparrowDoor

New attacks from Chinese hacker group FamousSparrow

27. March, 2025 - 11:06

After a long period of dormancy, the Chinese hacker group FamousSparrow is active again. According to the IT security company ESET, the group has become increasingly dangerous and has deployed new, sophisticated espionage tools.

Cybercrime 2024

Banking malware: 3.6 times more attacks on mobile users

26. March, 2025 - 07:28

Cybercriminals have adapted their methods in 2024 and are increasingly targeting mobile devices and the cryptocurrency sector.

Thousands of TP-Link Archer routers as target

New IoT botnet “Ballista” attacks TP-Link routers

25. March, 2025 - 16:06

Security researchers from the threat research team at Cato Networks have identified a new threat: the IoT botnet “Ballista”. This malware exploits a serious vulnerability in TP-Link Archer routers to spread unhindered across the internet.

Hackers infiltrate over 330 malicious apps into Google Play

Stealth malware: Over 60 million Android users affected

22. March, 2025 - 09:52

Cyber criminals have managed to bypass Android’s security mechanisms and infect over 60 million users worldwide with malware. Experts from Bitdefender Labs discovered a large-scale malware campaign with over 330 infected apps.

Ransomware group develops brute force framework

Automated attacks: BlackBasta relies on “BRUTED”

20. March, 2025 - 09:24

The ransomware group BlackBasta has developed a powerful tool to automate brute force attacks on edge network devices such as firewalls and VPNs. The framework, called “BRUTED”, allows attackers to crack targeted credentials and scale ransomware attacks on vulnerable networks.

Nationwide cyber attack in the USA

Zero Day on Netflix: How realistic is the series?

12. March, 2025 - 09:04

The series Zero Day deals with the current cyber threat landscape and addresses the consequences of a large-scale cyberattack in the USA. For exactly one minute, electricity, mobile networks, server systems, traffic control systems, and air traffic control systems fail simultaneously across the entire country. The attack costs over

Cyber espionage on a new level

SideWinder now also attacks nuclear power plants

10. March, 2025 - 12:15

The notorious advanced persistent threat (APT) group SideWinder has refined its attack tactics and significantly expanded its geographical reach. According to recent analyses by Kaspersky, the group is now specifically targeting nuclear power plants and energy facilities.

Best Practices

LLMJacking: Cybercriminals hijack DeepSeek

12. February, 2025 - 12:31

Since the discovery of LLMJacking by the Sysdig Threat Research Team (TRT) in May 2024, this threat vector has evolved rapidly. Just as large language models (LLMs) are constantly improving and finding new applications, cybercriminals are also adapting and using new ways to gain unauthorized access to these powerful

Study by Naoris Protocol

Web3 as a lifeline against quantum computer threats

07. February, 2025 - 11:29

A recent global study by Naoris Protocol shows: Most IT directors do not believe their companies are adequately prepared for the threats posed by quantum computing. At the same time, 83 percent consider decentralized systems to be more secure than traditional centralized cybersecurity solutions.