authenticator apps

A counterfeit version of WhatsApp circulated in the Google Play Store and was downloaded more than 500,000 times before attention was drawn to it. Heise reports on what affected users should now do, such as uninstalling the fake app, checking their device for malware, changing passwords and enabling two-factor authentication for their accounts.

A bank customer says that when they asked their bank, FD, whether it supported a particular security method, the bank said it did not and that they would have to use an authenticator app instead. The customer was reportedly locked out of their account in the process, and is criticising the bank's security practices, saying the claim that a method was insecure is itself worrying. Others in the discussion are sympathetic to the frustration with bank security and account access.

The China-linked hacking group Storm-0940 reportedly deployed an AI agent to abuse stolen ConnectWise OAuth application credentials, reaching Global Administrator access within minutes without triggering multi-factor authentication. The campaign, tracked as ARTEX, reportedly yielded nine detection signatures and 24 indicators of compromise, with full analysis published for defenders to check their environments.

Users of the Bird Count Australia app are reporting that they cannot log in. The app shows a 'Logging in, please wait' message before timing out, and the same problem occurs in Chrome and Firefox browsers as well as on multiple devices, including a Samsung Galaxy A15 phone and a Lenovo tablet. The issue suggests a server-side problem with the app's single sign-on authentication rather than a problem with individual devices or browsers.