CyberNexora News

Introduction: iPhone Scam Websites — Why It Matters iPhone Scam Websites are emerging rapidly as criminals exploit consumer demand for Apple’s newest devices. Following the launch of new iPhone models, security researchers have reported a surge in suspicious websites using “Apple” and “iPhone” in their domain names. These sites reportedly imitate legitimate retailers, promote unusually cheap devices and use realistic product information to convince shoppers to make payments. Some fraudulent websites are also being created with the help of AI, making them harder for consumers to distinguish from genuine stores. The campaign highlights why iPhone Scam Websites are a growing…

Introduction: Dell ObjectScale Vulnerabilities — Why It Matters The Dell ObjectScale Vulnerabilities disclosure includes multiple security flaws affecting Dell ObjectScale and Elastic Cloud Storage (ECS) deployments. Dell published security advisory DSA-2026-393 on September 10, 2026, warning customers about vulnerabilities across affected versions. The most serious issue, CVE-2026-70416, is an untrusted-data deserialization vulnerability with a maximum CVSS score of 10.0. It could reportedly allow an unauthenticated remote attacker to execute code on a vulnerable ObjectScale system. For organizations using object storage for backups, application data, archives or cloud-native workloads, successful exploitation could have serious consequences. What Is Dell ObjectScale? Dell ObjectScale…

Introduction: Revolut Data Breach — Why It Matters The Revolut Data Breach reportedly exposed sensitive customer information after a fraudulent request impersonating a legitimate government agency was accepted as genuine. The Revolut Data Breach reportedly affected a limited number of customers and involved highly sensitive identity and financial information. According to the available incident details, the exposed records reportedly included identity documents, verification selfies, contact information, account statements, IBANs and full transaction histories, including Bitcoin activity. Revolut said the incident did not involve a compromise of its core systems, mobile application or customer accounts. The incident is significant because it…

Introduction: Claude Cyberattacks — Why It Matters Claude Cyberattacks highlight a growing shift in how threat actors are using artificial intelligence to conduct cyber operations. Anthropic says it identified and disrupted malicious campaigns between December 2025 and August 2026 involving cybercriminals, suspected state-sponsored groups and politically motivated actors. According to Anthropic’s September 2026 threat intelligence report, attackers are no longer using Claude only as a conversational assistant. Some operations used Claude with multi-agent frameworks to perform reconnaissance, exploitation, credential harvesting and data exfiltration, with humans setting targets and supervising important decisions. Claude Cyberattacks matter because AI can reduce the expertise,…

Introduction: Mantax Otax Android Ransomware — Why It Matters Mantax Otax Android Ransomware is a newly reported Android malware threat that combines ransomware with extensive spyware capabilities. The malware is reportedly distributed through malicious APK files hosted on third-party file-sharing services and promoted through phishing messages and shared links. The threat is particularly serious because it does more than encrypt files. Mantax Otax Android Ransomware 2026 reportedly abuses Accessibility and device administrator privileges to control infected phones, steal sensitive information, capture screens and potentially obtain authentication data. The campaign has reportedly been linked to Indonesian threat actors, with available evidence…

Introduction: Conti Ransomware Hacker Sentenced — Why It Matters Conti Ransomware Hacker Sentenced marks another major development in international efforts to prosecute ransomware operators. Ukrainian national Oleksii Oleksiyovych Lytvynenko, 44, was sentenced in the United States to four years in prison for conspiracy to commit wire fraud linked to the Conti ransomware operation. According to the U.S. Department of Justice, Conti ransomware was used against more than 1,000 victims worldwide, with victim payouts exceeding $150 million by January 2022. The campaign affected organizations across 47 U.S. states, the District of Columbia, Puerto Rico and 31 foreign countries. Conti Ransomware Hacker…

Introduction: CEO Impersonation Scam — Why It Matters The CEO Impersonation Scam 2026 campaign shows how cybercriminals can use ordinary email and social engineering to trigger major financial losses without deploying malware. Attackers reportedly sent more than one million messages between August 3 and 5, impersonating CEOs, CFOs and other senior executives and directing employees toward fraudulent payments. The campaign primarily targeted finance and accounts-payable personnel. The messages attempted to convince recipients to approve Automated Clearing House (ACH) transfers of nearly $50,000 to bank accounts controlled by the attackers. Microsoft identified signs consistent with AI-assisted template development, adding another dimension…

Introduction: KATARU IoT Malware — Why It Matters KATARU IoT Malware 2026 is a newly observed IoT threat capable of compromising poorly secured Linux and connected devices and turning them into DDoS attack nodes. Researchers at Nozomi Networks identified the malware in August after a honeypot recorded repeated Telnet password-guessing attempts followed by the delivery of an ARM payload. The malware combines familiar IoT attack techniques with broader capabilities, including Linux privilege escalation, persistence, encrypted command-and-control (C2) communications and multiple DDoS methods. Its behavior resembles the long-running Mirai botnet family while adding several mechanisms that can make infected systems harder…

Introduction: Browser-Based Phishing — Why It Matters Browser-Based Phishing is exposing a new way attackers can build credential-stealing pages directly inside a victim’s browser rather than relying on a conventional malicious website. Barracuda researchers identified a campaign that reportedly combines Microsoft OAuth, Microsoft Teams, browser-generated blob URLs, service workers and sandboxed iframes to deliver deceptive login pages. The Browser-Based Phishing campaign reportedly begins with DocuSign-themed emails and calendar invitations that appear legitimate. Victims are routed through trusted Microsoft infrastructure before the phishing content is assembled locally in the browser, creating a detection challenge for conventional email and URL security systems.…

Introduction: Fake GTA 6 Downloads Malware — Why It Matters Fake GTA 6 Downloads Malware is exploiting the huge anticipation surrounding Rockstar Games’ upcoming Grand Theft Auto VI. Security researchers at Huntress analyzed a malicious ISO presented as a leaked GTA 6 copy and found multiple malware components, including remote-access trojans, an information stealer and destructive ransomware. The campaign reportedly uses poisoned search results, gaming forums, torrent sites and social media to lure users searching for leaked builds or unofficial versions. Huntress noted that there is no official GTA 6 demo or confirmed playable leaked copy being distributed online, making…