article thumbnail

New Shlayer Mac malware spreads via poisoned search engine results

Security Affairs

The bash shell script opens and runs itself in the Terminal app, then it extracts a self-embedded, password-protected.zip archive file, which contains a traditional Mac.app bundle. The malware can be used to download other malicious payloads, including malware or adware. ” continues the analysis. up to 10.14.3.

article thumbnail

Threat in your browser: what dangers innocent-looking extensions hold for users

SecureList

All of them were used to siphon off sensitive user data, such as cookies and passwords, and even take screenshots; in total, these malicious extensions were downloaded 32 million times. Since the beginning of 2020, Kaspersky products prevented 6,057,308 users from downloading malware , adware and riskware disguised as browser extensions.

Adware 99
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Gaming-related cyberthreats in 2020 and 2021

SecureList

Last year’s lockdowns gave a boost to the mobile market, with users downloading thirty percent more mobile games per week in Q1 2021 than in Q4 2019 globally, reaching over one billion weekly downloads. Another common type of software spread as games is adware, which shows illicit advertising against users’ wish.

Adware 111
article thumbnail

Apple shines and buffs Mac security—Is it enough to stop today’s malware?

Malwarebytes

The iOS vulnerability exploited by checkm8 rattled quite a few cages in late 2019. From an optional password manager feature in Safari that looks out for saved passwords involved in data breaches to new digital security for car keys on Apple Watches and the iPhone, the security sweep appears to be comprehensive.

Malware 99
article thumbnail

Security Affairs newsletter Round 232

Security Affairs

A flaw in LastPass password manager leaks credentials from previous site. Two selfie Android adware apps with 1.5M+ downloads removed from Play Store. MMD-0063-2019 – Summarize report of three years MalwareMustDie research (Sept 2016-Sept 2019). A bug in Instagram exposed user accounts and phone numbers.

Adware 52
article thumbnail

IT threat evolution Q1 2021. Non-mobile statistics

SecureList

In South Korea, a suspect in the GandCrab ransomware operation was arrested (this family ceased active distribution back in 2019). Analysis of network threats in Q1 2021 continued to show ongoing attempts to attack servers with a view to brute-force passwords for network services such as Microsoft SQL Server, RDP and SMB. IoT attacks.

Mobile 87
article thumbnail

Data Leak Strategy Fueling the Ransomware Economy

SecureWorld News

In 2019, crooks shifted their focus to enterprises and pioneered in stealing data in addition to encrypting it, which turned these raids into an explosive mix of blackmail and breaches. An offbeat hallmark of this marketplace is that its operators are using adware and cracked variants of popular applications to advertise the project.