2FA Codes Archives

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

26Aug

By RBNo Comments

News

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

A phishing-as-a-service (PhaaS) platform designed to remove Apple's Activation Lock on stolen devices has been revealed by cybersecurity researchers. The site uses hired AI voice agents to call theft victims pretending to be Apple Support and request their device passcode. The platform, which SOCRadar Threat Research Unit (STRU) tracks as AnonyMousKIT, is credit-metered and generates lures through five channels from a single victim record. These channels include email at 1.50 credits, SMS priced per sender ID, WhatsApp, a recorded voice call at 1 credit, and an AI voice agent at 2 credits. The pages and calls request the 4- or 6-digit device passcode, Apple ID credentials, and a live two-factor authentication (2FA) code from the targets, who are owners of recently lost or stolen App...

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

24Jul

By RBNo Comments

News

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

A then-unknown vulnerability in Zimbra's webmail software allowed a Russian state-sponsored espionage operation to read Western mailboxes for months. The last ninety days' worth of emails, the organization's whole email directory, the browser password, and the codes stored for two-factor recovery are all targeted by the payload. It only took opening the message to get it going. In addition to research from Palo Alto Networks' Unit 42 and Proofpoint, the NSA, CISA, and partner agencies released a joint advisory on the effort on Thursday. The method is described in the alert as "a view-based exploit that only requires a user to view a malicious email" in a client that is susceptible. It claims that since at least July 2025, the actors have been using Zimbra to target and compromise...

New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions

15Oct

By RBNo Comments

News

New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions

Google and Samsung Android devices have been discovered to be susceptible to a side-channel attack that may be used to capture personal data, including Google Maps timelines and two-factor authentication (2FA) passwords, pixel by pixel and without the users' knowledge. Scholars from Carnegie Mellon University, the University of California (Berkeley), the University of Washington, and the University of California (San Diego) have given the attack the codename Pixnapping. Fundamentally, pixnapping is a framework for pixel-stealing that targets Android devices in a way that gets around browser defenses and even steals information from non-browser apps like Google Authenticator by using Android APIs and a hardware side-channel. A malicious app can use this technique to obtain 2FA codes ...

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

16Jan

By RBNo Comments

News

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

Researchers studying cybersecurity have warned of a new malvertising effort that aims to phish for users' credentials through phoney Google ads, targeting both individuals and companies that use Google Ads. Jérôme Segura, senior director of threat intelligence at Malwarebytes, told The Hacker News that the plan involves spoofing Google Ads to capture as many advertising accounts as possible and rerouting users to phony login pages. It is believed that the campaign's ultimate objective is to sell the credentials to other criminal actors on underground forums and use them again to continue the activities. Posts on Google's support forums, Bluesky, and Reddit indicate that the threat has been active since at least mid-November 2024 read more about Google Ads Users Targeted in Malvertis...

Fluhorse Flutter Based Android Malware Targets Credit Cards and 2FA Codes

30Jun

By RBNo Comments

News

Fluhorse Flutter Based Android Malware Targets Credit Cards and 2FA Codes

Researchers in cybersecurity have revealed the inner workings of the Fluhorse malware family on Android. The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs analyst Axelle Apvrille wrote in a report released last week. Early in May 2023, Check Point discovered Fluhorse. This information described its attacks on customers in East Asia through rogue apps posing as ETC and VPBank Neo, which are well-known in Taiwan and Vietnam. Phishing is the malware's primary entry point. The app's ultimate objective is to send SMS-delivered two-factor authentication (2FA) codes, credit card information, and login credentials to a remote server controlled read more Fluhorse Flutter Based Android Malware...