Recently uncovered cyber operations linked to Vietnamese threat actors have revealed a sophisticated method of launching phishing attacks using Google AppSheet as a conduit. This campaign aims to compromise Facebook accounts, with approximately 30,000 accounts reported hacked. The operation, identified as “AccountDumpling” by cybersecurity firm Guardio, entails the hijacked accounts…
Critical Vulnerability Discovered in WhatsApp: An Emerging Threat A recently patched security vulnerability within WhatsApp poses notable risks for Android users. This issue, identified as CVE-2019-11932, is a double-free memory corruption bug that exists not in WhatsApp’s code but within an open-source GIF parsing library used by the app. If…
In response to prior security incidents and data misuse involving its platform, Facebook has taken significant steps to enhance the security of third-party applications and websites through an expanded bug bounty program. This initiative aims to address vulnerabilities in external apps that interface with Facebook, reinforcing the company’s commitment to…
Recent cybersecurity concerns have arisen around WhatsApp, a widely-used messaging application, as it faces yet another critical vulnerability. Reports indicate that WhatsApp quietly addressed a significant flaw that could allow attackers to remotely compromise devices and access sensitive messages and files. This vulnerability, known as CVE-2019-11931, is categorized as a…
Recently, critical vulnerabilities were identified in two prominent WordPress plugins: “Ultimate Addons for Beaver Builder” and “Ultimate Addons for Elementor.” These vulnerabilities pose significant risks for users who have not updated to the latest versions. Researchers have uncovered an authentication bypass vulnerability that allows attackers to gain administrative control of…
Critical Vulnerabilities Discovered in Zoom’s Video Conferencing Software In the realm of cybersecurity, recent developments concerning Zoom have raised significant alarms, especially for users relying on the platform for education, business, and social engagement. Cybersecurity researchers from Cisco Talos have identified two critical vulnerabilities within the popular video conferencing software,…
Meta Enhances Age-Verification Tools to Curb Underage Access Meta has significantly upgraded its age-verification processes by implementing an AI-driven system that analyzes images and videos on platforms like Instagram and Facebook. This initiative aims to identify and remove accounts belonging to users under the age of 13 by assessing “visual…
Noodlophile Malware Campaign Broadens Global Scope with Targeted Copyright Phishing Tactics
Aug 18, 2025
Malware / Enterprise Security
The Noodlophile malware actors are intensifying their reach, employing spear-phishing emails and enhanced delivery techniques to target enterprises in the U.S., Europe, Baltic countries, and the Asia-Pacific (APAC) region. According to Morphisec researcher Shmuel Uzan, “The Noodlophile campaign, active for over a year, now utilizes sophisticated spear-phishing emails masquerading as copyright infringement notices, complete with reconnaissance-driven details such as specific Facebook Page IDs and company ownership information.” Previously reported by a cybersecurity vendor in May 2025, the Noodlophile campaign initially leveraged fake AI-powered tools as malware lures, which were promoted on social media platforms like Facebook. The shift to copyright infringement tactics, however, is not a new strategy.
Noodlophile Malware Campaign Broadens Its Global Impact Through Copyright Phishing Tactics As of August 18, 2025, the Noodlophile malware campaign has intensified its operations, targeting businesses across the U.S., Europe, the Baltic nations, and the Asia-Pacific region. The cybercriminals orchestrating this campaign are employing sophisticated spear-phishing tactics, utilizing emails that…
Noodlophile Malware Campaign Broadens Global Scope with Targeted Copyright Phishing Tactics
Aug 18, 2025
Malware / Enterprise Security
The Noodlophile malware actors are intensifying their reach, employing spear-phishing emails and enhanced delivery techniques to target enterprises in the U.S., Europe, Baltic countries, and the Asia-Pacific (APAC) region. According to Morphisec researcher Shmuel Uzan, “The Noodlophile campaign, active for over a year, now utilizes sophisticated spear-phishing emails masquerading as copyright infringement notices, complete with reconnaissance-driven details such as specific Facebook Page IDs and company ownership information.” Previously reported by a cybersecurity vendor in May 2025, the Noodlophile campaign initially leveraged fake AI-powered tools as malware lures, which were promoted on social media platforms like Facebook. The shift to copyright infringement tactics, however, is not a new strategy.
Consumer Federation of America Files Lawsuit Against Meta Over Allegations of Fraudulent Advertising The Consumer Federation of America (CFA), a nonprofit organization, has initiated legal proceedings against Meta, asserting that the company’s management of scammers on its platforms transgresses consumer protection laws in Washington, DC. This lawsuit highlights concerns around…
