Npav Lab - Page 24

Critical Vulnerability in Automaker Portal Enables Remote Car Unlocking

Posted: August 12, 2025

Categories: Hacking, vulnerability

Tags: fp-3b, fp-3a, fp-1b, fp-1a

Author: Npav Lab

A serious flaw in a major automaker's dealer portal allows hackers to unlock and start vehicles remotely. Learn about the vulnerability and its implications.

DRDO Employee Loses ₹54 Lakh in Fake WhatsApp Investment Scam

Posted: August 11, 2025

Categories: WhatsApp, Financial fraud, Fraud Protector, Mobile Frauds

Tags: fp-2d, fp-2c, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

A DRDO employee in Hyderabad has fallen victim to a fake investment scam on WhatsApp, losing ₹54 lakh. Learn how the scam operated and the warning signs.

Google Breach: Voice Phishing Scam Exposes 2.55 Million Records

Posted: August 11, 2025

Categories: Google, Data Breach, Phishing

Tags: fp1b, fp-3b, fp-3a, fp-1a

Author: Npav Lab

Google's Salesforce instance was compromised by the ShinyHunters group using voice phishing tactics. Learn about the breach and the exposed records.

Hackers Bypass Microsoft Defender to Deploy Akira Ransomware

Posted: August 11, 2025

Categories: Ransomware, Hacker, Microsoft

Tags: fp6a, fp-6b, fp-4a, fp-1b, fp-1a

Author: Npav Lab

Hackers exploit a legitimate driver to bypass Microsoft Defender and install Akira ransomware. Learn how this vulnerability works and how to protect your PC.

Over 60 Malicious RubyGems Packages Target Social Media Credentials

Posted: August 08, 2025

Categories: Malware Alerts, Data Breach, Social Media

Tags: fp-3b, fp-3a, fp-2c, fp-2b

Author: Npav Lab

Socket’s Threat Research Team has uncovered over 60 malicious RubyGems packages that steal social media and marketing credentials. Learn how these infostealer tools operate.

GreedyBear Cyber Attack: $1 Million Stolen Using 650 Hacking Tools

Posted: August 08, 2025

Categories: Cyber Attack, Hacking

Tags: fp-3b, fp-3a, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

The GreedyBear cybercriminal operation has stolen over $1 million in a massive cryptocurrency theft campaign using 650+ malicious tools. Learn how they exploit browser extensions and AI.

Hackers Exploit QuickAssist to Steal Data in Under Five Minutes

Posted: August 08, 2025

Categories: Data Breach, Hacker

Tags: fp-6a, fp-4a, fp-1b, fp-1a

Author: Npav Lab

Cybercriminals compromised corporate systems in under five minutes by exploiting QuickAssist and PowerShell scripting. Learn how social engineering facilitated this rapid breach.

Florida Mom Loses ₹12.5 Lakh in AI Voice Cloning Scam

Posted: August 08, 2025

Categories: Financial fraud, Fraud Protector, Mobile Frauds

Tags: fp-3e, fp-3d, fp-3b, fp-2c, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

A Florida woman was tricked out of ₹12.5 lakh ($15,000) by scammers who cloned her daughter's voice in a deepfake emergency scam. Learn about this rising threat of AI-powered voice fraud.

Trend Micro Apex One Zero-Day Vulnerabilities CVE-2025-54948 & CVE-2025-54987 Exploited

Posted: August 08, 2025

Categories: vulnerability

Tags: fp-5b, fp-5a, fp-1b, fp-1a

Author: Npav Lab

Two critical zero-day vulnerabilities in Trend Micro Apex One (on-prem) devices, CVE-2025-54948 and CVE-2025-54987, are being exploited in the wild. Learn about their impact and mitigation strategies.

Hackers Exploit Free Trials of EDR Software to Bypass Security Protections

Posted: August 07, 2025

Categories: Security, Hacker

Tags: fp-6d, fp-6c, fp-6b, fp-5a, fp-4b, fp-4a

Author: Npav Lab

Cybercriminals are using free trials of Endpoint Detection and Response (EDR) software to disable existing security measures. Learn about the BYOEDR attack technique and its implications.