Threats

Cybercriminals have devised a new ruse: luring gamers to a modish crypto tank-game to gain full access to their computers.

A vulnerability in Kia’s web portal made it possible to hack cars and track their owners. All you needed was the car’s VIN number or just its license plate number.

How cybercriminals make money off victims’ love lives.

Phishers have adopted another trick: they send emails pretending to be from Docusign with a fake link to a document that the recipient must sign.

Our products are no longer available on Google Play. We explain why this happened, and how to install or update our apps for Android.

Recent research describes a method for snooping on what Apple Vision Pro users enter on the virtual keyboard.

At risk are users of modified versions of Spotify, WhatsApp, Minecraft, and other apps from Google Play.

Researchers have discovered several potential attack vectors targeting bicycles fitted with Shimano Di2 wireless gear-shifting system.

Fraudsters are using AI-generated digital clones to bypass Know Your Customer (KYC) procedures and open money laundering accounts.

We found new spyware targeting Android smartphone owners.

“Gentle grafters” are attacking dishonest crypto users by imitating wallet leaks and manipulating their victims for months.

Managing cybersecurity risks through an evidence-based approach.

Kaspersky experts examined the security of public Wi-Fi hotspots in Paris on the eve of the Olympics.

Scammers prepared carefully for this very sporty summer. First they targeted soccer fans during the Euros; now they’re setting their sights on spectators at the Paris 2024 Olympics. How can you stay safe from scams during the Games?

The story of how CrowdStrike released an update on a Friday and brought down thousands, tens of thousands, or maybe even hundreds of thousands of computers around the world.

How attitudes are changing toward intimate image abuse.

The masterminds behind the colossal botnet encompassing 19 million IP addresses used free VPN services as bait to lure unsuspecting users.

A turnkey home? A turnkey website? How about turnkey phishing? Scammers now sell turnkey phishing services to other scammers. Read on to find out how it works.

Developers’ accounts are being hijacked using fake job offers sent from a legitimate GitHub address.

A new phishing technique uses progressive web apps (PWAs) to mimic browser windows with convincing web addresses to steal passwords.

Almost six out of ten passwords can be cracked in less than an hour using either a modern graphics card or cloud services. All it costs is a few dollars and some free time. How this is possible and what to do about it is the topic of our study.