Efimer Trojan delivered via email and hacked WordPress websites

The Efimer Trojan is spreading through compromised WordPress sites, malicious torrents, and email campaigns impersonating lawyers. It steals cryptocurrency by replacing wallet addresses in the clipboard and can execute additional malicious scripts. The Trojan communicates with its command-and-control server via the Tor network. It has additional capabilities to brute-force WordPress sites and harvest email addresses for further distribution. The malware primarily targeted users in Brazil, India, Spain, Russia, Italy, and Germany between October 2024 and July 2025, affecting over 5,000 Kaspersky users.

Pulse ID: 689603fc3a16a87400a387ee
Pulse Link: https://otx.alienvault.com/pulse/689603fc3a16a87400a387ee
Pulse Author: AlienVault
Created: 2025-08-08 14:04:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

FAKE TELEGRAM PREMIUM SITE DISTRIBUTES NEW LUMMA STEALER VARIANT

A malicious campaign using the domain 'telegrampremium[.]app' is distributing a new variant of Lumma Stealer malware. The fake site mimics the official Telegram Premium platform and automatically downloads an executable file 'start.exe' upon access. This sophisticated information-stealing trojan can exfiltrate browser credentials, cryptocurrency wallet details, and system information. The malware employs various techniques for persistence, defense evasion, and data theft, including file system manipulation, registry modification, and clipboard operations. The campaign highlights the ongoing use of brand impersonation and social engineering for large-scale malware distribution, emphasizing the need for robust security measures and user awareness.

Pulse ID: 688ee51c244879cbcd8b5826
Pulse Link: https://otx.alienvault.com/pulse/688ee51c244879cbcd8b5826
Pulse Author: AlienVault
Created: 2025-08-03 04:27:08

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

CopyQ - program remembers all copied history, but removes "from clipboard" flag when source program closed #clipboard #paste #copyandpaste

https://askubuntu.com/q/1553951/612

Spear Phishing Campaign Delivers VIP Keylogger via Email Attachment

A sophisticated spear phishing campaign has been identified, distributing the VIP keylogger through email attachments. The malware is delivered via a ZIP file containing a malicious executable disguised as a PDF. Once executed, an AutoIt script drops two encrypted files, which are then decrypted and injected into RegSvcs.exe using process hollowing techniques. The VIP keylogger is designed to steal sensitive information by logging keystrokes, capturing credentials from popular web browsers, and monitoring clipboard activity. The campaign employs obfuscation techniques and maintains persistence through a VBS script in the Startup folder. The final payload exfiltrates data through SMTP and communicates with a command and control server.

Pulse ID: 688a355ead4c75a9701f25fd
Pulse Link: https://otx.alienvault.com/pulse/688a355ead4c75a9701f25fd
Pulse Author: AlienVault
Created: 2025-07-30 15:08:14

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

How would you enable #clipboard sharing from a physical remote IP KVM (like #JetKVM) to the local device?
Specifically: how can clipboard content (like copied text) from the remote machine be transferred back to your local system while using the KVM?

Clip-It (Mac) >> FREE

A secure and private clipboard history manager exclusively for macOS. Never lose your important copied text again.

https://clip-it.davidkelen.com

Arg, gerade meine Zwischenablage mit Notizen von ca. einer A4-Seite verloren, weil ich unbedingt 3 Wörter kopieren wollte. Original wurde leider vom Bahn-WLAN gefressen …

#linux #x11: Do you know of some #clipboard manager to keep N recent entries?

Threat Actors Utilize ClickFix to Dominate Targeted Organizations

Recently, it was observed that threat actors have been utilizing sophisticated social
engineering techniques to deceive users into executing malicious commands. These
operations are primarily conducted through compromised websites, malvertising,
and YouTube tutorials. In addition, fake tech support forums that rely on
clipboard hijacking have also been observed in these malware deployment
campaigns. Clipboard hijacking, also known as pastejacking, involves injecting
harmful scripts into a victim’s clipboard, which users are then instructed to execute
via the Run dialog or Windows shortcut keys. This method has proven to be highly
effective for threat actors, as it can lead to full organizational takeovers, data
exfiltration, and ransomware deployments.

Pulse ID: 6872e095ee3ea12bb08911d5
Pulse Link: https://otx.alienvault.com/pulse/6872e095ee3ea12bb08911d5
Pulse Author: cryptocti
Created: 2025-07-12 22:24:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

Inky - Clipboard App (Mac) >> FREE

Inky is a clipboard app for designers, developers and creatives. Save text, links, images, and colors effortlessly to streamline your creative workflow.

https://apps.apple.com/pl/app/inky-clipboard-app/id6748526665

Was #Facebook kann, kann ein Virus schon lange
In dieser gewohnt unterhaltsamen Folge plaudern Rüdiger und Tobias über ein Konzert mit fragwürdigem Sound, #Meta als neuen Virenschleuder, #Leaks mit 16 Milliarden #Passwörtern und bizarre Browser-#Dating-Konzepte. Dazu:
Warum #Google Maps Hinweise auf US-Militärschläge liefert, #WhatsApp jetzt #Werbung schalten wollte und die neue #Apple-#Clipboard-Hölle kommt

Webseite der Episode: https://igeh.podigee.io/76-was-facebook-kann-kann-ein-virus-schon-lange

Mediendatei: https://audio.podigee-cdn.net/1987627-m-9d9c0b1c518e957aac5ba3d134c9555f.mp3?source=feed

Clipboard Indicator - GNOME Shell Extensions
https://extensions.gnome.org/extension/779/clipboard-indicator/

Clipboard Manager

Samsung Confirms Galaxy Clipboard Security Flaw

#Cybersecurity #Samsung #Galaxy #Android #OneUI #Security #Privacy #Vulnerability #Clipboard #PasswordSecurity #DataLeak #MobileSecurity

https://winbuzzer.com/2025/04/28/samsung-confirms-galaxy-clipboard-security-flaw-xcxwbn/

#Clic v2.00.255 - #UPDATED - an easy to use #Clipboard To #Icon #Converter. Generate #stunning #icons in true color (#24bit, #16.7 million #colors) with #transparency. Now under the #MIT #license. https://www.blaizenterprises.com/clic.html

15+ years a Mac user and I didn’t know it:

Command-Option-Shift-V will strip any formatting.
#PSA #Apple #MacOS #Clipboard

https://www.macrumors.com/how-to/macos-copy-paste-text-without-formatting/

ClickMyText als Beispiel für schnelle Selbsthilfe

Eine einfach gestrickte Lösung für mehrere wiederholte Kopier-Operationen.

#Clipboard #Java #Linux

https://gnulinux.ch/clickmytext-als-beispiel-für-schnelle-selbsthilfe

Is there an app thing with which I can quickly put things from my Windows clipboard to my Android one? Or some way to quickly put text from Windows to Android which doesn't involve copying it around and sending it to myself on WhatsApp etc.?
#Android #Clipboard

Memory Guardian, cancella automaticamente la clipboard su Android

Memory Guardian è un’applicazione open source per Android che permette di gestire e cancellare automaticamente il contenuto della clipboard.

https://www.lealternative.net/2025/04/01/memory-guardian-cancella-automaticamente-la-clipboard-su-android/