Red Secure Tech LTD

RedWing Android malware is rented on Telegram as a bank fraud service. It steals banking logins, 2FA codes, and hijacks calls. Targets Russian financial firms.

For More: https://www.redsecuretech.co.uk/blog/post/redwing-android-malware-rented-as-bank-fraud-service/1311

RedWing Android Malware Rented as Bank Fraud Service RedWing - A new bank fraud scheme involving an Android malware-as-a-service operation can be leased via Telegram for carrying out the crime. The malware is...

AI bots are joining WhatsApp and Telegram groups automatically using public invite links. Learn how to stop bot swarms and protect your private chats.

For More: https://www.redsecuretech.co.uk/blog/post/ai-bots-joining-whatsapp-and-telegram-groups-automatically/1309

AI Bots Joining WhatsApp and Telegram Groups Automatically AI bots - You check your Telegram trading group. Two hundred new members joined in the last 30 minutes. They all have similar names and profile pictures. T...

China-linked UNK_MassTraction exploits Roundcube flaws against US and Canadian universities. IceCube malware steals credentials and deploys VShell backdoors.

For More: https://www.redsecuretech.co.uk/blog/post/china-linked-hackers-target-us-universities-via-roundcube/1308

China-Linked Hackers Target US Universities via Roundcube China-linked activity cluster suspected of carrying out attacks on the Roundcube webmail program of universities in the United States and Canada through th...

KNX visualisering smart building panels suffer from broken access control. Attackers can brute force pin codes and gain unauthorised access.

For More: https://www.redsecuretech.co.uk/blog/post/knx-visualisering-broken-access-control-exposes-panels/1307

KNX Visualisering Broken Access Control Exposes Panels Vulnerability in KNX visualisering panels can compromise the smart building control system due to an unauthorized access attack. The vulnerability is broug...

Joomla SP LMS PHP object injection (CVE-2026-48909) allows RCE via lmsOrders cookie. Update to 4.1.4 or Joomla 5.2.2 to mitigate.

For More: https://www.redsecuretech.co.uk/blog/post/joomla-sp-lms-php-object-injection-leads-to-rce/1306

Joomla SP LMS PHP Object Injection Leads to RCE Joomla SP LMS PHP - Joomla extension JoomShaper SP LMS contains an object injection vulnerability leading to remote code ex*****on for the attacker. This v...