Mobile Security | Breaking Cybersecurity News | The Hacker News

It feels like every AI conversation starts the same way: "We need an AI strategy!" Leadership wants the productivity gains. Employees want the convenience. And IT is expected to make it all happen—securely, of course. AI can summarize meetings, translate conversations, draft emails, and surface information in seconds. It promises to eliminate the kind of repetitive work that quietly steals hours from every week. But beneath all the excitement lies a question that needs more attention. Before AI can help you work smarter, it needs access to your information. That could be a calendar invite, next quarter's product roadmap, or IP. Think of AI like hiring the world's smartest intern. It can research, summarize, and help organize your otherwise disorganized meeting notes. In other words, you have to hand it your notebook full of your confidential information. The real question is what happens to that notebook after you've handed it over. Shadow AI isn't a...

As anticipation builds for the FIFA World Cup 2026, cybercriminals are rapidly scaling fraud operations designed to exploit global fan excitement, urgency, and trust in tournament-related content. CTM360 researchers identified more than 7,000 FIFA World Cup 2026-themed domains, including over 4,500 newly registered domains observed within the last five months alone . More than 1,000 malicious or fraudulent websites have already been activated, alongside over 1,000 social media impersonation accounts operating across major platforms. The activity highlights how threat actors increasingly treat major global sporting events as large-scale monetization opportunities, combining fake ticket sales, fraudulent streaming platforms, betting scams, malware delivery, and social engineering into coordinated fraud ecosystems. Unlike isolated phishing attempts, these campaigns operate through repeatable fraud lifecycles that mirror organized cybercrime operations. CTM360's Fraud Navigator ...

CTM360 has recently observed a sophisticated global scam campaign where victims are lured through fraudulent Google Play Store download pages. CTM360, a leading cybersecurity company for Digital Risk Protection, has identified over 6,000 instances of these fake pages, tricking users into downloading malicious apps. Once installed, the apps disguise themselves as legitimate software to deploy PlayPraetor (a malware named after the authoritative Roman praetor). It seizes control of infected devices to steal banking credentials, log keystrokes, and monitor clipboard activity. The operation's global reach and complexity highlight a highly coordinated effort to compromise users' data for malicious purposes. How the Scam Works Threat actors behind PlayPraetor execute a well-crafted deception strategy: Fake Play Store Pages – Cybercriminals create highly realistic clones of Google Play Store and other trusted sources to distribute Trojanized APKs. Malicious APKs Disguised as L...