article thumbnail

Tracing the Supply Chain Attack on Android

Krebs on Security

com via Domaintools.com shows the domain was assigned in 2015 to a company called “ Shanghai Blazefire Network Technology Co. In July 2017, Russian antivirus vendor Dr.Web published research showing that Triada had been installed by default on at least four low-cost Android models. Research on blazefire[.]com com , buydudu[.]com

Mobile 243
article thumbnail

On Chinese "Spy Trains"

Schneier on Security

It's also why the United States has blocked the cybersecurity company Kaspersky from selling its Russian-made antivirus products to US government agencies. Meanwhile, the chairman of China's technology giant Huawei has pointed to NSA spying disclosed by Edward Snowden as a reason to mistrust US technology companies.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Tracing the Supply Chain Attack on Android

Krebs on Security

com via Domaintools.com shows the domain was assigned in 2015 to a company called “ Shanghai Blazefire Network Technology Co. In July 2017, Russian antivirus vendor Dr.Web published research showing that Triada had been installed by default on at least four low-cost Android models. Research on blazefire[.]com com , buydudu[.]com

Mobile 159
article thumbnail

Breach Exposes Users of Microleaves Proxy Service

Krebs on Security

” Microleaves has long been classified by antivirus companies as adware or as a “potentially unwanted program” (PUP), the euphemism that antivirus companies use to describe executable files that get installed with ambiguous consent at best, and are often part of a bundle of software tied to some “free” download.

article thumbnail

MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry

Security Affairs

Using an encrypted payload is quite a common way to evade Antivirus, since the encrypted payload changes depending on the used key. According to VirusTotal the software was “seen in the Wild” in 2010 but submitted only on 2018-10-12! I met Palantir Technologies where I was introduced to the Intelligence Ecosystem.

Malware 93
article thumbnail

Cyber Security Roundup for April 2021

Security Boulevard

invest in better endpoint detection and response (EDR) technology, apparently recommending Cylance or VMware Carbon Black. At the start of March 2021, Microsoft rushed out patches for a critical zero-day Vulnerability in Exchange Server (2010, 2013, 2016, and 2019). conduct employee phishing tests. conduct penetration testing.

article thumbnail

Mariposa Botnet Author, Darkcode Crime Forum Admin Arrested in Germany

Krebs on Security

More recently, Škorjanc served as chief technology officer at NiceHash , a Slovenian company that lets users sell their computing power to help others mine virtual currencies like bitcoin. In December 2017, approximately USD $52 million worth of bitcoin mysteriously disappeared from the coffers of NiceHash.