A week in security (May 28 – June 3)

Credit to Author: Malwarebytes Labs| Date: Mon, 04 Jun 2018 16:51:36 +0000

Last week on Labs, we talked about the significance of SEO poisoning in the world of search marketing, blackmail attempts against financial institutions in Canada, voice command flaws in smart assistants, survey and potential phishing scams on Instagram, and the latest changes in Office 365.

We also shared our latest intel about America Geeks, a band of tech scammers that we profiled in 2015 and 2016.

Theoretically, millions of smart devices are at risk of compromise if the Z-Shave attack is done in the wild. (Source: Bleeping Computer)
First, SunTrust. Now, Coca-Cola. (Source: Bleeping Computer)
I think we saw this coming: robots are extremely insecure and can be used as “cyber weapons.” (Source: Internet of Business)
When it comes to securing IoTs, multi-modal biometrics user authentication could become the norm. (Source: ABI Research)
Users in India warned of new malware dubbed “virtual girlfriend” and “panda banker” that are capable of stealing money and user data. (Source: The Hindu Business Line)
Valve finally patched a decade-old flaw in the Steam client. (Source: ZDNet)
A new trend has emerged: cryptomining apps are on the rise while malicious apps are declining. (Source: Help Net Security)
Here’s another alarming threat in the mobile space: There was a 650 percent increase in mobile fraud transactions since 2015. (Source: Help Net Security)
Disinformation can be found anywhere. And the United States and Europe are not equipped to handle this, especially coming from AI. (Source: Foreign Policy)
Yes! Members of the House and Senate re-introduced a bill to protect children’s online data. (Source: EdScoop)

Stay safe, everyone!