Eyes up, Digital Defenders! 🛡️

Cybercriminals are getting craftier. They’re turning calendars into command centers, routers into rogue armies, and fake apps into global malware traps. From the dark corners of the web to the USB ports in your airport terminal, today’s threats are bold, stealthy … and everywhere.

Stay sharp, stay curious — and don’t forget to vote in our poll below: Have you ever risked charging your phone in a public USB port?

Here’s what you need to know:

Zero-Day Download

Google Calendar Exploited: APT41 Hides Malware in Plain Sight

China-linked APT41 is using new malware, ToughProgress, to exploit Google Calendar as a covert command-and-control channel.

Source: androidpolice.com..

Discovered by Google’s Threat Intelligence Group, the campaign masked malicious traffic behind trusted Workspace services. Google has since dismantled the attacker infrastructure and added new protections.

To stay protected, users should monitor unusual cloud app activity and tighten access controls around integrated third-party services.

Feeling inspired to strengthen your organization's approach to cloud security? Check out this Cloud Security Policy template and this comprehensive guide to managing your cloud security posture.

Stealthy ‘AyySSHush’ Botnet Hijacks 9,000+ ASUS Routers via Persistent SSH Backdoor

Stealthy new botnet AyySSHush has compromised over 9,000 ASUS routers and is targeting other SOHO models from Cisco, D-Link, and Linksys.

The attack employs brute-force tactics and exploits, such as CVE-2023-39780, to install persistent SSH keys, thereby surviving firmware upgrades without deploying malware.

Users should audit SSH access, change default credentials, and review router settings for anomalies.

Fake AI and VPN Sites Push Stealers in Global Crypto Theft Campaign

A global crypto theft campaign by the "Dark Partner" group is leveraging a vast network of fake AI, VPN, and crypto software sites to deliver malware.

Masquerading as popular apps, these clones spread Poseiden (macOS), Lumma (Windows), and loaders like Payday to steal credentials, private keys, cookies, and other sensitive data. 

Users should download software only from verified sources and monitor systems for signs of infostealer infections.

Share this newsletter!

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

‘ChoiceJacking’ Attack Lets Malicious Chargers Steal Data from Phones Without Consent

A new attack dubbed ChoiceJacking allows rogue charging stations to bypass USB security prompts and steal data from smartphones and tablets without user consent.

Source: cybersecuritynews.com.

Discovered by researchers at Graz University of Technology, the method affects devices from top brands like Apple, Samsung, Google, and Xiaomi, exposing files, documents, and app data. Despite vendor protections, the attack exploits deep flaws in USB permission systems.

To stay safe, users should avoid public USB ports and use charge-only cables.

NATO and Dutch Police Targeted By Russian Cybercrime Group

Microsoft and Dutch intelligence have identified a new Russian state-backed group, called Laundry Bear, as the culprit behind cyberattacks on NATO, Dutch police, and several European nations last year.

The General Intelligence and Military Intelligence agencies warned that these intrusions are part of a broader international threat campaign orchestrated by the group.

93.7 Billion Stolen Cookies Flood Dark Web, Putting Millions at Risk

According to research by NordStellar, a massive cybercrime operation has exposed 93.7 billion stolen browser cookies on the dark web. Over 15.6 billion cookies remain active, posing a threat to user security across 253 countries.

The scale and persistence of these threats highlight the urgent need for stronger browser hygiene and multi-factor authentication.

Security Tip of the Day

Charging in Public? Hackers Are Counting on It

You’ve probably heard the warnings: public USB charging stations are perfect bait for hackers to slip malware onto your device or siphon off your data.

Source: seatmaestro.com.

But let’s be real. Sometimes you’re stuck at the airport, your phone’s at 2%, and you need to make that call before takeoff. So what do you do?

If you’re forced to top off your battery in a pinch, here’s how to stay charged without getting juice jacked:

And remember, none of these precautions is foolproof. If you’re unsure about the safety of a charging station, it might be smarter to let your phone die and wait for a trusted outlet than risk getting hacked.

Security Question of the Day

Have you ever charged your phone using a public USB charging station?

Results from Yesterday's Security Question of the Day

Are you worried about AI leaking secrets?

Meet Our Writers:

Leon Yen

Leon Yen is a cybersecurity expert and seasoned tech journalist with over a decade of experience, including founding a cyber risk startup and leading industry-focused research and reporting.

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.