Weekly review of the National Cyber Security Centre Finland (NCSC-FI) - 48/2025

This week we highlight the “Be vigilant on the web! Recognise and prevent digital scams” public event to be held at Oodi on 2 December. We also discuss digital skimming attacks targeting online shop payment pages and report on devices exposed to the BadBox 2.0 malware, some of which have ended up for sale in well-known US retail chains. In addition, we introduce the new Shai Hulud worm, which spreads in developer environments and steals access credentials. We also draw attention to recent Microsoft 365 account breaches, and in this week’s malware review, we take a closer look at PromptLock.