NewsThe Register — Security
Fake IT bods on Microsoft Teams coax workers into installing malware
Teaser from the source
Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping EtherRAT trojan
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on installing
Other advisories
- Mediumpwn_watch:android-ghostmap-apk-zip-crash-loop-unpatchedAndroid GhostMap: installing a crafted app can trap a phone in a crash loop, and Google won't ship a security fix
- Not ratedosv:CLEANSTART-2024-VZ22734When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox wo...
- Not ratedosv:CLEANSTART-2026-EQ89586When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory
- Not ratedosv:CLEANSTART-2024-DK66902As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation
- Not ratedosv:CLEANSTART-2024-TW25811When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox wo...
- Not ratedosv:CLEANSTART-2026-LH77976pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
- Not ratedosv:CLEANSTART-2026-FW80348pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
- Not ratedosv:CLEANSTART-2026-JD93552When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory
Other news entries
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last TimeNewsThe Hacker News
- Binance says fake job interview led to $6.3 billion crypto heistNewsBleepingComputer
- Microsoft fixes Smart App Control broken by October Windows updateNewsBleepingComputer
- Microsoft finally fixes VPN issues caused by September updatesNewsBleepingComputer
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwareNewsThe Hacker News
- AI coding agents hijacked using AGENTS.md file in Downloads folderNewsBleepingComputer
- Windows Server 2025 gets support for quick machine recoveryNewsBleepingComputer
ID