Security Affairs

OCTOBER 13, 2019

UK NCSC agency warns of APTs exploiting Enterprise VPN vulnerabilities. Multiple APT groups are exploiting VPN vulnerabilities, NSA warns. Amnesty claims that 2 Morocco rights advocates were targeted by NSO Group spyware. Ops, popular iTerm2 macOS Terminal App is affected by a critical RCE since 2012.

VPN 52

VPN Spyware Data breaches Advertising 52

SecureList

NOVEMBER 1, 2022

In June, we identified a previously unknown Android spyware app that targets Persian-speaking individuals. It provides victims with a VPN connection that can be used to browse these resources. The spyware itself collects various data from the victims’ devices, such as call logs or lists of contacts.

Malware 142

Malware Ransomware Spyware Encryption 142

SecureList

NOVEMBER 14, 2022

In 2022, the GReAT team tracked several threat actors leveraging SilentBreak’s toolset as well as a commercial Android spyware we named MagicKarakurt. Okta was breached through one of its service providers, Sitel, itself compromised via the insecure VPN gateway of a recently acquired company.

Firmware 111

Firmware Surveillance Mobile Telecommunications 111