2013, Malware and Surveillance - Cyber Security Informer

CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 1, 2023

Five of the issues added by CISA to its catalog are part of the exploits used by surveillance vendors to target mobile devices with their commercial spyware: CVE-2021-30900 – Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability. The exploits were used to install commercial spyware and malicious apps on targets’ devices.

Spyware

Spyware Surveillance Mobile Education

New Android Spyware Tools Emerge in Widespread Surveillance Campaign

Threatpost

JULY 1, 2020

Never-before-seen Android spyware tools have been used in a widespread APT campaign to spy on the Uyghur ethnic minority group - since 2013.

Spyware

Spyware Surveillance Malware Hacking

Ferocious Kitten: 6 years of covert surveillance in Iran

SecureList

JUNE 16, 2021

The malware dropped from the aforementioned document is dubbed ‘MarkiRAT’ and used to record keystrokes, clipboard content, provide file download and upload capabilities as well as the ability to execute arbitrary commands on the victim machine. Background. Analysis of MarkiRAT. hxxp://C2/ech/client.php?u=[computername]_[username]&k=[AV_value].

Surveillance

Surveillance Malware Password Management Passwords

Webinars

Human-Centered Cyber Security Training: Driving Real Impact on Security Culture

MORE WEBINARS

Experts spotted two Android spyware used by Indian APT Confucius

Security Affairs

FEBRUARY 11, 2021

Confucius is a pro-India APT group that has been active since 2013, it mainly focused on Pakistani and other South Asian targets. Since 2018, the hackers started targeting mobile users with an Android surveillance malware ChatSpy. The malware can download content from FTP shares and run arbitrary commands as root.

Spyware

Spyware Surveillance Malware Mobile

Sextortion campaign uses Goontact spyware to target Android and iOS users

Security Affairs

DECEMBER 16, 2020

Security experts spotted a new malware strain, named Goontact, that allows its operators to spy on both Android and iOS users. The malware allows operators to retrieve phone identifiers and steal contacts, SMS messages, photos, and even location data. The spyware is likely used as part of a sextortion campaign.

Spyware

Spyware Mobile Surveillance Malware

Transparent Tribe APT hit 1000+ victims in 27 countries in the last 12 months

Security Affairs

AUGUST 23, 2020

Transparent Tribe has been active since at least 2013, it targeted entities across 27 countries, most of them in Afghanistan, Germany, India, Iran and Pakistan. If these conditions are met, it will start to monitor removable media, and for each of these, the malware will try to infect the device and steal files of interest.”.

Malware

Malware Media Advertising Surveillance

The Belgacom hack was the work of the UK GCHQ intelligence agency

Security Affairs

OCTOBER 28, 2018

Back to September 2013, Belgacom (now Proximus), the largest telecommunications company in Belgium and primarily state-owned, announced its IT infrastructure had suffered a malware-based attack. The investigation revealed that the malware-based attack was powered by GCHQ and code-named Operation Socialist.

Hacking

Hacking Spyware Telecommunications Malware

The Origins and History of the Dark Web

Identity IQ

FEBRUARY 8, 2024

From 2011 to 2013, the Silk Road hosted 1.2 2013: The End of the Silk Road Authorities were able to trace the pseudonym back to Ulbricht thanks to the efforts of an IRS investigator who was working with the DEA on the Silk Road case in mid-2013. The FBI shut down the Silk Road in October 2013. billion in value.

Identity Theft

Identity Theft Cryptocurrency Government Engineering

Iran-linked APT42 is behind over 30 espionage attacks

Security Affairs

SEPTEMBER 11, 2022

The campaigns have been conducted since 2015 and are aimed at conducting information collection and surveillance operations against individuals and organizations of strategic interest to Teheran. ” The surveillance operations conducted by the APT group involved the distribution of Android malware such as VINETHORN and PINEFLOWER.

Surveillance

Surveillance Social Engineering Phishing Government

APT trends report Q1 2022

SecureList

APRIL 27, 2022

Disclaimer: when referring to APT groups as Russian-speaking, Chinese-speaking or other-“speaking” languages, we refer to various artefacts used by the groups (such as malware debugging strings, comments found in scripts, etc.) On February 23, ESET published a tweet announcing new wiper malware targeting Ukraine.

Malware

Malware Firmware Government Phishing

MoonBounce: the dark side of UEFI firmware

SecureList

JANUARY 20, 2022

This driver, which runs during the initial phases of the kernel’s execution, is in charge of deploying user-mode malware by injecting it into an svchost.exe process, once the operating system is up and running. Finally, the user mode malware reaches out to a hardcoded C&C URL (i.e. Other pieces of malware on the radar.

Firmware

Firmware Malware Encryption Passwords

APT trends report Q1 2021

SecureList

APRIL 27, 2021

In our initial report on Sunburst , we examined the method used by the malware to communicate with its C2 (command-and-control) server and the protocol used to upgrade victims for further exploitation. This campaign made use of a previously unknown malware family we dubbed FourteenHi.

Malware

Malware Spyware Government Social Engineering

The Challenges Facing the Passwordless Future

eSecurity Planet

SEPTEMBER 25, 2022

In 2013, for example, the FIDO Alliance was created to solve the world’s password problem by replacing login technology. On the other hand, while passkeys may do much to stop email phishing , as biometrics won’t be an easy target, cyber criminals can turn to other malware to remotely hack and unlock a phone.

Passwords

Passwords Password Management Authentication Technology

FinSpy: unseen findings

SecureList

SEPTEMBER 28, 2021

FinSpy, also known as FinFisher or Wingbird , is an infamous surveillance toolset. The Pre-Validator ensures that the victim machine is not used for malware analysis. The nature of these shellcodes indicates that they are used to fingerprint the system and verify that it is not used for malware analysis. MacOS Infection.

Encryption

Encryption Malware Spyware Architecture

US whistleblower Edward Snowden received permanent residency by Russian authorities

Security Affairs

OCTOBER 23, 2020

In 2013, Edward Snowden shed the light on the mass surveillance program operated by the US government to spy on its citizens and allies. The former CIA employee and National Security Agency contractor Edward Snowden (37) has been granted permanent residency in Russia, his lawyer announced on Thursday.

Surveillance

Surveillance Advertising Hacking Government

Cyber Security Informer

CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog

New Android Spyware Tools Emerge in Widespread Surveillance Campaign

Webinars

Trending Sources

Ferocious Kitten: 6 years of covert surveillance in Iran

Webinars

Experts spotted two Android spyware used by Indian APT Confucius

Sextortion campaign uses Goontact spyware to target Android and iOS users

Transparent Tribe APT hit 1000+ victims in 27 countries in the last 12 months

The Belgacom hack was the work of the UK GCHQ intelligence agency

The Origins and History of the Dark Web

Iran-linked APT42 is behind over 30 espionage attacks

APT trends report Q1 2022

MoonBounce: the dark side of UEFI firmware

APT trends report Q1 2021

The Challenges Facing the Passwordless Future

FinSpy: unseen findings

US whistleblower Edward Snowden received permanent residency by Russian authorities

Stay Connected