Today's cybersecurity round-up highlights a significant data breach impacting SafePal cryptocurrency wallet users and widespread DDoS attacks targeting the secure messaging service Threema. Additionally, new macOS malware has emerged, capable of hijacking browser sessions.
SafePal Reports Data Breach Affecting Nearly 40,000 CustomersBreach
Cryptocurrency hardware wallet provider SafePal has disclosed a data breach that exposed order information for approximately 39,798 customers. A vulnerability was exploited to steal this data, which a threat actor is now reportedly attempting to sell.
Why it matters: If you are a SafePal customer, review your accounts for suspicious activity and be wary of phishing attempts, as your order details may now be in the hands of malicious actors.
Read more at BleepingComputer ↗
Threema Secure Messaging Service Hit by DDoS AttacksOther
The encrypted messaging service Threema experienced multiple distributed denial-of-service (DDoS) attacks this week. These attacks caused significant disruptions to user communications, impacting the availability of the service.
Why it matters: DDoS attacks can cripple online services, highlighting the importance of robust infrastructure and mitigation strategies for any business relying on continuous online operation.
Read more at BleepingComputer ↗
New AmnesiaStealer Malware Targets macOS Browser SessionsThreat
A new information-stealing malware, dubbed AmnesiaStealer, is now targeting macOS users through 'ClickFix' attacks. This malware possesses a unique streaming module that grants attackers interactive control over a victim's web browser.
Why it matters: Mac users should be extremely cautious about unexpected pop-ups or download prompts, as this new malware can allow attackers to directly manipulate your browser and steal sensitive information during active sessions.
Read more at BleepingComputer ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.