The first malicious program targeting smartphones running Google's Android operating system has been detected, according to researchers at Kaspersky Lab. The SMS trojan, masquerading as a media player application, already has infected a number of mobile devices, Kaspersky said. Once installed on a user's phone, the trojan delivers text messages to premium rate numbers without the user's consent, resulting in money being transferred from a user's account to the cybercriminals. Right now, the trojan only affects Russian users and is not spreading in the Android Marketplace, but researchers expect to see more malware soon targeting Android phones. — AM
Malicious Chrome web store extensions identified SecurityWeek reports that more than 30 malicious extensions in the Google Chrome web store with nearly 87 million total user downloads have been discovered to have obfuscated code enabling JavaScript code-injection by third-party websites to all visited websites.
Ninety-two more apps, nearly half of which are on Google Play, that have cumulatively amassed more than 30 million installations were discovered to be compromised with the SpinOk malware, which has been distributed through a malicious software development kit supply chain attack, BleepingComputer reports.
New finding from Vulcan Cyber underscores the need for security teams to fully test and review any code they generate from ChatGPT and other generative AI products.
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news