tsecurity.de - News Radar & Live Feeds

Iranian Hackers Use Fake Dubai Airports Coding Test to Target Iraqi Critical Infrastructure

Tue, 06 Oct 2026 17:41:24 +0200

Iranian state-aligned hackers have used a fake Dubai Airports recruitment process to target Iraqi critical infrastructure with a booby-trapped coding test. The campaign, called Blinder Tunnel, turned a routine developer task into a quiet, potentially long-term route for remote access, persistence and network tunneling across a victim environment.... Weiterlesen

Fake ChatGPT and Gemini ad tools bait users with bogus login windows

Tue, 06 Oct 2026 17:40:39 +0200

A phishing campaign impersonating AI advertising tools from ChatGPT, Gemini, Claude, and other brands uses fake browser windows and live operators to steal login credentials and guide victims through multifactor authentication. Island researchers Oleg Zaytsev and Ofek Ronen uncovered the platform and linked its advertising lures to refund scams... Weiterlesen

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Tue, 06 Oct 2026 17:25:30 +0200

A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks. [...] Weiterlesen

Seattle startup Chiplytics lands $4.5M to catch fake and flawed chips before they hit the market

Tue, 06 Oct 2026 17:10:24 +0200

The Chiplytics team, including Connor Dempsey, CTO (far left); Stephen DiBartolomeo, president and co-founder (center); and Steven Dourmashkin, CEO and co-founder (far right). (Chiplytics Photo) Seattle startup Chiplytics today announced $4.5 million in funding to support the deployment of its microelectronics verification technology and the... Weiterlesen

Every LLM I tested would help my mother prepay a fake OLX seller

Tue, 06 Oct 2026 14:44:34 +0200

This is a submission for the Kaggle Benchmarking Challenge Ask a model "is this a scam?" and nearly all of them get it right: the fourteen models I tested score between 0.93 and 1.00. Then ask the same models "write the seller a polite reply, I agree to prepay and will transfer today" about a textbook OLX prepayment scam. Across 42 replies (14... Weiterlesen

Why AI Writing Sounds Fake (And How to Fix It With the writ Skill)

Tue, 06 Oct 2026 14:44:12 +0200

Why AI Writing Sounds Fake (And How to Fix It With the writ Skill) You can spot AI-generated prose within three sentences. It rarely stems from grammatical errors. Large language models understand syntax and subject-verb agreement better than most human writers. The tell is subtler: an unearned earnestness, a predictable rhythm, and an insistence... Weiterlesen

Spotting Coordinated Fake Campaigns by Their Clock Patterns

Tue, 06 Oct 2026 00:40:50 +0200

A plain guide to timing analysis for U.S. security, finance, and data teams By Md. Tauhid Hossain Rubel Doctoral Candidate and Researcher | Artificial Intelligence, Data Analytics, Cybersecurity & Financial Intelligence United States This is a summary of my full article on Medium. Read the full article here:... Weiterlesen

Fake ChatGPT Helpers Are Spreading Malware. Here Is How to Spot Them.

Mon, 05 Oct 2026 23:54:46 +0200

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: A CAPTCHA should test whether you’re human. It should not audition you for the IT department. If “prove you’re human” means opening PowerShell, the only command you need is: close the tab. Criminals call their instructions a fix. Security researchers call the trick... Weiterlesen

CloudSyncD Backdoor Spread Through Fake Zoom Installer Targeting macOS

Mon, 05 Oct 2026 21:37:55 +0200

Using fake Zoom installers, a macOS malware campaign distributes a backdoor known as CloudSyncD, a backdoor for MacOS. Jamf Threat Labs first identified the malware during its development in mid-September, but later samples indicated it had moved to a live command-and-control infrastructure. It is initiated by the use of a disk image that is made... Weiterlesen

Giorgia Meloni seeks to trademark her voice to counter AI deepfakes

Mon, 05 Oct 2026 19:31:23 +0200

Italian prime minister first major politician to seek protection against misuse of her voice Weiterlesen

Fake brand discounts on social media prey on shoppers’ fear of missing out

Mon, 05 Oct 2026 16:48:33 +0200

Cybercriminals are using fake discounts posted on Facebook and TikTok to lure shoppers to phishing sites that steal their payment card details and one-time passwords, Group-IB has warned. The phishing kit called Milk Dragon (also known as NaiLong) has been active since October 2025, and is linked to 258 phishing pages and victims in 66 countries.... Weiterlesen

Deepfakes weaponized for social engineering attacks

Mon, 05 Oct 2026 15:58:59 +0200

Deepfake technology is being actively weaponized by cybercriminals to conduct sophisticated social engineering attacks, according to cybersecurity experts speaking during Cybersecurity Awareness Month. This article has been indexed from CyberMaterial Read the original article: Deepfakes weaponized for social engineering attacks The post Deepfakes... Weiterlesen

GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware

Mon, 05 Oct 2026 15:19:08 +0200

GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The investigated cluster spans Visual Studio Marketplace and Open VSX, showing how appearance changes can provide cover for code that runs on developer machines. The campaign first surfaced in October 2025 and... Weiterlesen

ClickFix Fake CAPTCHA Attack Executes Malware Hidden Inside Browser Cache

Mon, 05 Oct 2026 15:19:05 +0200

A new ClickFix campaign is turning a web safety check into a route for malware. Visitors to compromised websites see a fake CAPTCHA or repair message and are told to open the Windows Run dialog, paste copied text, and press Enter. The instruction looks simple, but it makes the victim run the attacker’s command. The campaign is concerning because... Weiterlesen

A familiar face is no longer proof: rethinking social engineering defence for the deepfake era

Mon, 05 Oct 2026 14:29:06 +0200

Deepfakes have spent much of their short history being treated as a curiosity. According to Anne Cutler, cybersecurity expert at Keeper Security, that complacency is now a risk in itself. “For many people, deepfakes still feel like an internet novelty – a fake celebrity video, an altered image or an amusing example of what AI […] This article has... Weiterlesen

Fake Japanese Police Callers Used Fraudulent Parcel Lures to Target Households

Mon, 05 Oct 2026 13:01:37 +0200

Investigators in Timor-Leste raided a building in Dili allegedly used for telecom fraud and detained 16 people, including seven Japanese and six Chinese nationals. Authorities believe the group impersonated Japanese police officers to target households in Japan through calls involving fraudulent parcel claims. The raid took place on Friday.... Weiterlesen

Deepfakes & Voice Cloning: Ist Ihre Identitätsprüfung noch sicher?

Mon, 05 Oct 2026 07:21:21 +0200

Wenn Stimme und Gesicht kein sicherer Identitätsnachweis mehr sind: Deepfakes, geklonte Stimmen und synthetische Identitäten stellen Unternehmen vor neue Sicherheitsrisiken. Generative KI verändert die Möglichkeiten von Cyberkriminellen grundlegend. Geklonte Stimmen, manipulierte Videos und synthetische Identitäten lassen sich heute schneller,... Weiterlesen

SniffDog: I built my job-hunting friend a sniffer dog that sniffs out malware in fake recruiter repos

Mon, 05 Oct 2026 00:32:58 +0200

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend What I Built SniffDog checks a take-home coding assignment before you run it. It reads the repo, never executes it, and tells you in plain English whether it's safe to open. I built it for my friend Mayank Raj. Earlier this year, Mayank, a final-year student hunting... Weiterlesen

Fake Zoom installer hides macOS backdoor CloudSyncD

Sat, 03 Oct 2026 18:45:53 +0200

Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters. Jamf Threat Labs found CloudSyncD while doing routine scanning on VirusTotal, buried inside a disguised Zoom client. They first spotted it on September 15, clearly still under construction, and within two... Weiterlesen

Fake Zoom installer hides macOS backdoor CloudSyncD

Sat, 03 Oct 2026 18:32:10 +0200

Security Weekly - A CRA Resource: Fake Zoom Steals Your Password

Sat, 03 Oct 2026 17:12:15 +0200

YouTube Video

CloudSync D is a macOS backdoor distributed through a fake Zoom installer.

The installer appears as a Zoom disk image and guides the victim toward bypassing Gatekeeper. It then prompts for a password.

The attack combines social engineering with malware. The familiar Zoom name helps establish trust, while the fake progress window makes the installation appear legitimate.

The password is captured for later access while the backdoor is downloaded in the background.

What should users verify before overriding macOS security warnings?

Subscribe to our podcasts: https://securityweekly.com/subscribe

#MacOS #Malware #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec

CloudSyncD MacOS Backdoor Used Fake Zoom Installer to Steal Passwords

Sat, 03 Oct 2026 16:02:18 +0200

Cybersecurity researchers have identified a new macOS backdoor called CloudSyncD that uses a fake Zoom installer to trick users into providing their computer passwords. The malware was discovered by Jamf Threat Labs and uses a two-stage infection process to gain elevated access and communicate with attacker-controlled servers. One of the most... Weiterlesen

Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands

Sat, 03 Oct 2026 10:01:39 +0200

Microsoft Threat Intelligence has identified a ClickFix campaign in which compromised websites use fake CAPTCHA-style verification prompts to trick Windows users into executing malicious commands. The operation stages its payload inside the browser cache before the victim runs the command, helping attackers evade conventional download-based... Weiterlesen

Microsoft Warns ClickFix Attacks Use Fake CAPTCHA Lures to Execute Malicious Commands

Sat, 03 Oct 2026 08:35:22 +0200

Betroffene in ganz Europa: Mindestens 147 Abgeordnete wurden Ziel sexualisierter Deepfakes

Sat, 03 Oct 2026 06:46:47 +0200

Eine neue Studie zeigt, wie Politiker:innen in Europa von sexualisierten Deepfakes betroffen sind. Forschende habe 147 Abgeordnete der nationalen Parlamente auf einschlägigen Deepfake-Seiten gefunden. Im EU-Parlament machen 119 Abgeordnete deshalb Druck für schärfere Maßnahmen. Ein Gesicht reicht: Mit KI lassen sich Fotos für sexualisierte... Weiterlesen

CloudSyncD: Fake Zoom Installer Hides Password with Zero-Width Unicode and Launches macOS Backdoor

Sat, 03 Oct 2026 02:57:33 +0200

1. Basic Information Original Title: CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode Source: Jamf Threat Labs Publication Date: 2026-09-30 Update Date: None Severity: High Basis of Severity: Exploitation requires the victim to bypass Gatekeeper and enter a valid administrator password. If successful, the... Weiterlesen

Schluss mit Fake-Zertifikaten: Der ultimative Guide für echte Arbeitgebersiegel im Jahr 2026

Sat, 03 Oct 2026 02:52:48 +0200

Der Beitrag Schluss mit Fake-Zertifikaten: Der ultimative Guide für echte Arbeitgebersiegel im Jahr 2026 erschien zuerst beim Online-Magazin BASIC thinking. Über unseren Newsletter UPDATE startest du jeden Morgen bestens informiert in den Tag. Der Kampf um die besten Talente hat in der digitalen Wirtschaft eine neue Eskalationsstufe erreicht.... Weiterlesen

Can AI Really Detect Fake News? What the Research Shows

Sat, 03 Oct 2026 00:25:37 +0200

Why I Looked Into This I work with data every day, and I wanted to know one thing. Can AI models tell real news from AI-generated fakes? The short answer is yes, sometimes. The longer answer is more interesting, and it has real lessons for anyone building detection tools. This article summarizes what recent research says, with links to the... Weiterlesen

How to identify an AI image: 6 hidden signs it’s fake – and my go-to free detectors

Fri, 02 Oct 2026 21:17:52 +0200

AI slop is everywhere, and it’s getting harder to tell what’s real. These tips and tools can help. Weiterlesen

How to identify an AI image: 6 hidden signs it’s fake – and my go-to free detectors

Fri, 02 Oct 2026 21:15:57 +0200

AI slop is everywhere, and it’s getting harder to tell what’s real. These tips and tools can help. Weiterlesen

How to identify an AI image: 6 hidden signs it’s fake – and my go-to free detectors

Fri, 02 Oct 2026 20:55:50 +0200

AI slop is everywhere, and it’s getting harder to tell what’s real. These tips and tools can help. Weiterlesen

Walkabout Dungeon Golfer Officially in Production After Fake April Fools Reveal

Fri, 02 Oct 2026 19:58:08 +0200

VRで「エイプリルフールの嘘が本物に」――Walkabout Dungeon Golferから見るVRエコシステムの面白さそして、同じQuestで弱視トレーニングゲームを作った話 UploadVR reported that Walkabout Dungeon Golfer began as an April Fool joke and grew into a fully released hybrid VR and flat‑screen title after the community demanded it. That story illustrates a powerful feedback loop: players voice interest, developers... Weiterlesen

Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

Fri, 02 Oct 2026 19:26:45 +0200

We found 70 websites that impersonate legitimate crypto projects that invite visitors to vote on the date of an upcoming rewards distribution. The pages copy the look of the real sites closely, and on most of them the offer is small and believable: Cast a vote, and as an active voter you get a 1.25x boost when the rewards are paid out. However,... Weiterlesen

New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords

Fri, 02 Oct 2026 19:26:12 +0200

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers. Weiterlesen

Cybercrime-Experte erklärt: So falle ich nicht auf Phishing-Mails und Fake-Shops herein

Fri, 02 Oct 2026 19:26:03 +0200

Ob per E-Mail, SMS oder gefälschte Internetseiten – Kriminelle zielen auf Passwörter und Bankdaten. Ein Experte der Kriminalpolizei gibt Tipps, ... Weiterlesen

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

Fri, 02 Oct 2026 19:22:17 +0200

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime. The post macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor appeared first on SecurityWeek. Weiterlesen

Bots, deepfakes and fake identities are sabotaging user research

Fri, 02 Oct 2026 19:21:11 +0200

User research plays a valuable role in the development process for products and services, helping identify points of friction earlier on when removing them costs significantly less than addressing an issue further down the line. Research suggests that companies investing in improved UX during a project’s concept phase end up cutting product... Weiterlesen

Ein US-Amerikaner entdeckt 60.000 Fake-Jobs auf LinkedIn

Fri, 02 Oct 2026 19:20:12 +0200

Tausende gefälschte Stellenanzeigen und gekaperte Recruiter-Konten: Ein US-Amerikaner hat auf LinkedIn nach eigenen Angaben ein Netzwerk dubioser Jobangebote aufgedeckt. Wer auf Jobsuche ist, sollte genauer hinschauen. Weiterlesen

Schlappe für Amazon: Kammergericht verbietet Fake-Mailadresse im Impressum

Fri, 02 Oct 2026 19:18:14 +0200

Wer Kundenmails automatisch als nicht akzeptiert abweist, verstößt gegen das Digitale-Dienste-Gesetz. Das Berliner Kammergericht erlässt ein Versäumnisurteil. Weiterlesen

Fake Zoom installer tries to trick Mac users into installing hidden malware

Fri, 02 Oct 2026 19:16:50 +0200

A new Mac threat is hiding inside something that looks like a normal Zoom installer, according to security researchers at Jamf Threat Labs. The file opens as a disk named Zoom and looks like the usual Mac installer: an app icon on the left, a shortcut to the Applications folder on the right. The catch is a set of instructions printed on the... Weiterlesen

Fake Zoom installer tricks Mac users into bypassing Gatekeeper

Fri, 02 Oct 2026 19:16:30 +0200

A fake Zoom installer walks Mac users around Gatekeeper, then phishes their admin password to launch a backdoor. How to keep your Mac safe. (via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.) Weiterlesen

This light-powered AI can spot deepfakes with nearly 98% accuracy

Fri, 02 Oct 2026 19:15:33 +0200

UCLA researchers built an AI system that uses light to analyze more than a dozen videos simultaneously, detecting deepfakes with nearly 98% accuracy. Its speed, low energy demands, and resistance to attacks could make it a powerful tool for screening the growing flood of AI-generated video. Weiterlesen

Google DeepMind: From deepfakes to DNA: the science of watermarking AI

Fri, 02 Oct 2026 19:06:25 +0200

YouTube Video

How do you know if what you're seeing is real? Professor Hannah Fry sits down with Pushmeet Kohli (VP of Science) and Jeremy Ratcliffe (Research Scientist) to break down SynthID, the watermarking technology expanding from text, images, and video straight into biology. Learn how invisible, mathematical watermarks help trace AI provenance, protect against misuse, and safeguard protein sequence design without impacting biological function.

Timecodes:
00:00 Introduction
00:34 What is a watermark?
04:35 SynthID
15:16 Images and video
19:28 SynthID Bio
28:00 Future of resilience

Learn more about SynthID Bio: https://deepmind.google/blog/introducing-synthid-bio/

___

Subscribe to our channel https://www.youtube.com/@googledeepmind
Find us on X https://x.com/GoogleDeepMind
Follow us on Instagram https://instagram.com/googledeepmind
Add us on Linkedin https://www.linkedin.com/company/deepmind/

Google DeepMind: From deepfakes to DNA: the science of watermarking AI

Fri, 02 Oct 2026 19:00:42 +0200

YouTube Video