article thumbnail

Unauthorized data access vulnerability in macOS is detailed by Microsoft

Malwarebytes

The vulnerability, tracked as CVE-2024-44133 was fixed in the September 16 update for Mac Studio (2022 and later), iMac (2019 and later), Mac Pro (2019 and later), Mac Mini (2018 and later), MacBook Air (2020 and later), MacBook Pro (2018 and later), and iMac Pro (2017 and later). Therefore, those apps can’t bypass the macOS TCC checks.

Adware 144
article thumbnail

A new Stantinko Bot masqueraded as httpd targeting Linux servers

Security Affairs

Researchers spotted a new variant of an adware and coin-miner botnet operated by Stantinko threat actors that now targets Linux servers. Researchers from Intezer have spotted a new variant of an adware and coin-miner botnet that is operated by Stantinko threat actors since 2012.

Adware 145
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Mobile malware evolution 2020

SecureList

The word “covid” in various combinations was typically used in the names of packages hiding spyware and banking Trojans, adware or Trojan droppers. Last year was notable for both malware and adware, the two very close in terms of capabilities. Number of adware attacks on mobile users in 2019 and 2020 ( download ).

Mobile 145
article thumbnail

Breach Exposes Users of Microleaves Proxy Service

Krebs on Security

” Microleaves has long been classified by antivirus companies as adware or as a “potentially unwanted program” (PUP), the euphemism that antivirus companies use to describe executable files that get installed with ambiguous consent at best, and are often part of a bundle of software tied to some “free” download.

article thumbnail

China-based Fangxiao group behind a long-running phishing campaign

Security Affairs

Researchers from Cyjax reported that a China-based financially motivated group, dubbed Fangxiao, orchestrated a large-scale phishing campaign since 2017. “The Fangxiao campaigns are effective lead generation methods which have been redirected to various domains, from malware, to referral links, to ads and adware.”

Phishing 130
article thumbnail

IT threat evolution Q1 2021. Non-mobile statistics

SecureList

The most common vulnerability in the suite remains CVE-2017-11882 , a stack buffer overflow that occurs when processing objects in the Equation Editor component. Updated adware for the new Macs also immediately appeared, in particular the Pirrit family (whose members placed high in our Top 20 threats for macOS). into the system.

Mobile 109
article thumbnail

IT threat evolution in Q3 2023. Non-mobile statistics

SecureList

Adware programs and fake system accelerators remained the main threat to macOS users in Q3. Note that these rankings only include attacks by malicious objects that fall under the Malware class ; they do not include Web Anti-Virus detections of potentially dangerous or unwanted programs, such as RiskTool or adware. 2 AdWare.OSX.Pirrit.ac

Mobile 119