Cybersecurity Brief – 2025-04-19

Sat, 19 Apr 2025 00:00:00 +0000

Major Incidents and Breaches

SonicWall SMA VPN Devices Under Active Attack
- A remote code execution vulnerability in SonicWall Secure Mobile Access (SMA) appliances has been actively exploited since at least January 2025. Organisations using these devices are at heightened risk and should prioritise patching and mitigation.
Apple Zero-Day Exploits
- Two zero-day vulnerabilities in Apple iOS devices have been used in sophisticated attacks targeting specific individuals, indicating likely involvement of spyware or nation-state actors. Details remain limited.
Smishing Surge Tied to Chinese Threat Actors
- A China-based cybercriminal group, “Smishing Triad,” is conducting widespread toll-themed SMS phishing attacks across the US and UK, aiming for financial theft. A custom Chinese smishing kit is enabling these campaigns.
FBI Impersonation Scam
- Scammers are posing as FBI IC3 employees, contacting previous fraud victims and offering assistance in recovering lost funds as a means to further defraud them.
Payment Card Scam with Malware Component
- A new scam involves phone calls and malware disguised as security or verification tools to capture payment card details and access funds.
Alleged SmokeLoader Operator Charged
- US authorities have charged an individual accused of operating the SmokeLoader malware, responsible for stealing personal data of over 65,000 individuals.