Hidden prompts can secretly rewrite an AIβs memory, and researchers say thatβs a serious problem



ClickLock can shut down Mac apps for more than three days while pressuring users to enter a password and stealing sensitive account data in the background.
The post ClickLock Mac Malware Traps Users in a Three-Day Password Loop appeared first on TechRepublic.


RedHook malware uses fake banking and government apps to steal data and control Android phones, with attacks confirmed in Vietnam and Indonesia so far.
The post Fake Bank Apps Let Scammers Control Android Phones in Southeast Asia appeared first on TechRepublic.
Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code.
The malware is delivered in two stages. The first is distributed in a disk image that masquerades as Maccy, a clipboard manager for Macs. Itβs compiled as AppleScript that is notable for the way it delivers the second stage. The malware is named PamStealer because the Rust-written infostealer uses the Pluggable Authentication Modules interface built into macOS to validate the targetβs login password before sending it to an attacker-controlled server.
The use of both disk image and AppleScript is common in malware for Macs. More unusual is the way PamStealer combines them to gain stealth. When the AppleScript is double-clicked, itβs opened in the macOS Script Editor, where the malicious functionality is buried deep within the file.


Microsoft found a fake Perplexity AI Chrome extension that rerouted searches through attacker servers. Hereβs what users should check now.
The post Microsoft Warns: Fake Perplexity Extension Abused Chrome Search Features appeared first on TechRepublic.