1. Hackers siphon hundreds of millions of pesos out of Mexican banks through shadow transactions by Graham Gluley

Cybercriminals made off with an eye-popping amount of money from Mexican banks earlier this year. According to a recap of the news via The Tripwire over 300 million pesos, $15 million USD, was illegally transferred out of banks. The transfers were detected until last month but Reuters broke the news Wednesday. It's unclear exactly how attackers got in but it’s possible a software vulnerability in SPEI, an electronic payments system used by banks in the country, similar to SWIFT, is to blame. Of course it was only two years ago that an attack on SWIFT resulted in the loss of $81 million from the central bank of Bangladesh. The New York Times Magazine, in case you missed it, delved into the SWIFT attack in an issue earlier this month.

2. 'Telegrab' Malware Grabs Telegram Encryption Keys, Steam Credentials Lucian Armasu

Of all the so-called encrypted messaging apps it's always seemed as if Telegram has had the hardest time maintaining a reputation. The latest issue to affect the app - a strain of malware that steals encryption keys and cached data - only targets the desktop version of the app but that doesn't make it any less scary. The malware, discovered by researchers with Cisco Talos, is named Telegrab. According to Tom's Hardware the malware makes use of a design flaw in the app - the fact that users can't automatically logout - to harvest stored files. It’s worth nothing the desktop version of the app does not allow users to utilize Telegram's Secret Chats feature, something that when compounded by malware like this can really put a users’ privacy and security in jeopardy, Talos researchers warn.

3. Fake Fortnite Apps Scamming and Spying on Android Gamers by Viral Gandhi

It's happened before and will happen again: Attackers will always try to capitalize on uber-popular mobile games to scam users. The rampant popularity behind Pokemon Go and Super Mario Run in 2016 prompted a flurry of scams and malware. The latest victim: Fortnite fans. While the game was recently released for iOS it's yet to be released on Android, driving many fans to download fake apps that are actually spyware and adware. Researchers with Zscaler have kept on top of the phony apps, including apps that mine cryptocurrency, apps that can read user keystrokes and record audio, and apps that download other fake apps and attempt to raise revenue for attackers.