Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Spyware 77

Spyware Surveillance Telecommunications Mobile 77

Security Affairs

APRIL 19, 2022

Researchers from Citizen Lab have published a report detailing the use of a new zero-click iMessage exploit, dubbed HOMAGE, to install the NSO Group Pegasus spyware on iPhones belonging to Catalan politicians, journalists, academics, and activists. SecurityAffairs – hacking, NSO Group Pegasus). To nominate, please visit:?

Spyware 92

Spyware Surveillance Government Software 92

Security Affairs

JUNE 22, 2020

Researchers at Amnesty International collected evidence that a Moroccan journalist was targeted with network injection attacks using NSO Group ‘s spyware. ” The analysis of Omar Radi’s iPhone suggests network injection attacks took place on 27 th January, 11 th February, and 13 th of September 2019. .”

Spyware 113

Spyware Surveillance Mobile Advertising 113

Security Affairs

OCTOBER 11, 2021

A Togolese human rights advocate was hit by mobile spyware that has been allegedly developed by an Indian firm called Innefu Labs. Experts believe the attackers used a spyware developed by an Indian company called Innefu Labs. In the past, the Donot Team spyware was found in attacks outside of South Asia. Pierluigi Paganini.

Spyware 82

Spyware Surveillance Accountability Mobile 82

Security Affairs

APRIL 11, 2021

More than 500,000 Huawei users have been infected with the Joker malware after downloading apps from the company’s official Android store. More than 500,000 Huawei users were infected with the Joker malware after they have downloaded tainted apps from the company’s official Android store. SecurityAffairs – hacking, Huawei apps).

Malware 141

Malware Spyware Mobile Antivirus 141

Security Affairs

JULY 16, 2021

The Joker malware is back, experts spotted multiple malicious apps on the official Google Play store that were able to evade scanners. The spyware is able to steal SMS messages, contact lists, and device information and to sign victims up for premium service subscriptions. ” states a post published by the experts.

Malware 139

Malware Mobile Spyware Encryption 139

Krebs on Security

NOVEMBER 13, 2019

In July 2016, KrebsOnSecurity published a story identifying a Toronto man as the author of the Orcus RAT , a software product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. This week, Canadian authorities criminally charged him with orchestrating an international malware scheme.

Malware 200

Malware Advertising Marketing System Administration 200

Security Affairs

OCTOBER 19, 2020

Researchers spotted new variants of the Windows GravityRAT spyware that now can also infect Android and macOS devices. Researchers from Kaspersky Lab have spotted new variants of the GravityRAT malware that now can be also used to infect Android and macOS devices.

Malware 114

Malware Computers and Electronics Spyware Advertising 114

Security Affairs

DECEMBER 21, 2020

Tens of Al Jazeera employees were targeted in a cyber espionage campaign leveraging a zero-click iOS zero-day vulnerability to hack their iPhones. Researchers from Citizen Lab reported that at least 36 Al Jazeera employees were targeted in a cyber espionage campaign leveraging a zero-click iOS zero-day vulnerability to hack their iPhones.

Hacking 132

Hacking Surveillance Spyware Government 132

Malwarebytes

MAY 16, 2022

2021 saw a massive surge in detections of malware, adware, and Potentially Unwanted Programs (PUPs). Detections of malware on Windows business machines were 143% higher in 2021 than in 2020, and 65% higher on consumer machines. Windows malware detection totals 2019-2021.

Malware 81

Malware Adware Cryptocurrency Cybercrime 81

Security Affairs

JULY 11, 2019

Malware researchers from Kaspersky have discovered new and improved versions of the infamous FinFisher spyware used to infect both Android and iOS devices. Experts at Kaspersky have discovered a new improved variant of the FinFisher spyware used to spy on both iOS and Android users in 20 countries. Pierluigi Paganini.

Spyware 99

Spyware Mobile Advertising Architecture 99

Security Affairs

MARCH 5, 2020

China-linked cyber espionage groups increasingly targeted organizations in the telecommunications industry in 2019. “Analysis in 2019 revealed a focus by Chinese adversaries on the telecommunications sector, which could support both signals intelligence and further upstream targeting. SecurityAffairs – hacking, China).

Telecommunications 91

Telecommunications Mobile Spyware Advertising 91

Security Affairs

JUNE 21, 2020

Shlayer Mac malware is back, the Mac threat is now spreading through new black SEO operations. Researchers spotted a new version of the Shlayer Mac malware that is spreading via poisoned Google search results. The malware can be used to download other malicious payloads, including malware or adware. up to 10.14.3.

Engineering 140

Engineering Malware Adware Antivirus 140

Security Affairs

MARCH 13, 2019

One of the zero-day flaws ( CVE-2019-0797 ) patched this week by Microsoft has been exploited in targeted attacks by several threats groups, including FruityArmor and SandCat APT groups. “In addition to CVE-2019-0797 and CHAINSHOT , SandCat also uses the FinFisher /FinSpy framework.” Pierluigi Paganini.

Spyware 93

Spyware Advertising Government Hacking 93

Security Affairs

FEBRUARY 22, 2020

The infamous Joker malware has found a way to bypass the security checks to be published in the official Play Store, new clicker was found by experts. The spyware is able to steal SMS messages, contact lists, and device information and to sign victims up for premium service subscriptions. wpaper com. vailsmsplus.

Malware 127

Malware Spyware Advertising Mobile 127

Security Affairs

OCTOBER 5, 2020

A China-linked threat actor used UEFI malware based on code from Hacking Team in attacks aimed at organizations with an interest in North Korea. Researchers from Kaspersky have spotted a UEFI malware that was involved in attacks on organizations with an interest in North Korea.

Firmware 126

Firmware Spyware Surveillance Hacking 126

Security Affairs

FEBRUARY 6, 2022

One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream. Like NSO Group, QuaDream develops surveillance malware for government and intelligence agencies.

Surveillance 94

Surveillance Spyware Government Hacking 94

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The binaries are obfuscated and do some checks to detect if the spyware is running in a Virtual Machine. SecurityAffairs – hacking, FinSpy). Pierluigi Paganini.

Spyware 140

Spyware Surveillance Mobile Advertising 140

Security Affairs

JULY 16, 2020

Researchers spotted a new Android banking trojan dubbed BlackRock malware that steals credentials and credit card data from hundreds of apps. The BlackRock malware borrows the code from the Xerxes banking malware, which is a strain of the popular LokiBot Android trojan.

Malware 89

Malware Banking Mobile Spyware 89

Security Affairs

JULY 9, 2020

Check Point research discovered that the Joker (aka Bread) Android malware once again has bypassed protections implemented by Google for its Play Store. “Check Point’s researchers recently discovered a new variant of the Joker Dropper and Premium Dialer spyware in Google Play. . SecurityAffairs – hacking, Joker).

Malware 77

Malware Spyware Mobile Advertising 77

Security Affairs

SEPTEMBER 24, 2023

In 2016, researchers from the non-profit organization CitizenLab published a report that describes a campaign of targeted spyware attacks carried out by the Stealth Falcon. The researchers explained that unlike other malware typically using components written in only one programming language, Deadglyph uses distinct programming languages.

Spyware 117

Spyware Malware Architecture Encryption 117

Security Affairs

APRIL 13, 2022

One of the officials targeted with the infamous spyware there is Didier Reynders, a senior Belgian statesman who has served as the European Justice Commissioner since 2019. The Pegasus spyware used the ForcedEntry zero-day exploit to compromise the recipients’ devices without their interaction. To nominate, please visit:?

Surveillance 92

Surveillance Software Spyware Hacking 92

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. CVE-2019-8605 internally referred to as SockPort2 and publicly known as SockPuppet CVE-2020-3837 internally referred to and publicly known as TimeWaste. SecurityAffairs – hacking, RCS Labs).

Surveillance 113

Surveillance Mobile Spyware Telecommunications 113

Security Affairs

OCTOBER 14, 2020

The authorities started the investigation last year after the German blog Netzpolitik and some advocacy groups (Reporters Without Borders, Society for Freedom Rights, and the European Center for Constitutional and Human Rights), filed a complaint with Munich prosecutors in the summer of 2019. SecurityAffairs – hacking, K-Electric).

Surveillance 112

Surveillance Spyware Software Advertising 112

Security Affairs

AUGUST 30, 2019

Google researchers discovered that iPhone devices could be hacked by tricking owners into visiting specially crafted websites. Researchers at Google Project Zero discovered that it was possible to hack iPhone devices by visiting specially crafted websites. — Ben Hawkes (@benhawkes) February 7, 2019. Apple iOS 12.1.4

Spyware 88

Spyware Hacking Advertising Encryption 88

Security Affairs

MARCH 7, 2021

In the last years, security experts documented multiple hacking and disinformation campaigns, attributed to Russia-linked APT groups, that targeted Lithuania, Estonia , and Latvia. The head of cyber security Rimtautas Cerniauskas confirmed the discovery of at least three Russian spyware on government computers since 2015.

Spyware 129

Spyware Cyber Attacks Government Hacking 129

Security Affairs

SEPTEMBER 12, 2019

“The main Simjacker attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone, which then instructs the SIM Card within the phone to ‘take over’ the mobile phone to retrieve and perform sensitive commands.” SecurityAffairs – SimJacker, hacking). ” continues the post.

Hacking 106

Hacking Mobile Spyware Manufacturing 106

Security Affairs

FEBRUARY 14, 2021

SecurityAffairs – hacking, newsletter). If you want to also receive for free the international press subscribe here. COMB breach: 3.2B COMB breach: 3.2B COMB breach: 3.2B If you want to also receive for free the international press subscribe here. Pierluigi Paganini.

Spyware 89

Spyware Phishing Data breaches Surveillance 89

Security Affairs

SEPTEMBER 18, 2020

Ransomware , the headliner of the previous half-year, walked off stage: only 1 percent of emails analyzed by Group-IB’s Computer Emergency Response Team (CERT-GIB) contained this kind of malware. Another 17 percent contained downloaders, while backdoors and banking Trojans came third with a 16- and 15-percent shares, respectively.

Phishing 103

Phishing Ransomware Spyware Banking 103

Security Affairs

APRIL 28, 2020

In 2019, researchers from Dr. Web discovered a backdoor trojan in Google Play, which appeared different from other threats due to its level of sophistication for this reason Kaspersky investigated it. “One of the latest samples was published on the official Android market on November 6, 2019. . ” continues the analysis.

Malware 106

Malware Advertising Spyware Marketing 106

Security Affairs

APRIL 21, 2020

Hackers launched spear-phishing attacks against organizations in the oil and gas industry sector spreading the Agent Tesla info-stealer malware. The attacks aim at infecting victims with the infamous Agent Tesla info-stealer malware. To do this, the spyware creates different threads and timer functions in the main function.

Spyware 103

Spyware Manufacturing Malware Engineering 103

Security Affairs

OCTOBER 30, 2020

Threat actors behind the Operation Earth Kitsune used SLUB (for SLack and githUB) malware and two new backdoors tracked as dneSpy and agfSpy to exfiltrate data from the infected systems and for taking over them. Experts discovered that the exploit was infecting the victim machine with three separate malware samples. Pierluigi Paganini.

Advertising 131

Advertising Spyware Malware Internet 131

Security Affairs

JULY 13, 2019

Croatia government agencies targeted with news SilentTrinity malware. Experts uncovered a new Magecart campaign that hacked over 960 stores. Kaspersky report: Malware shared by USCYBERCOM first seen in December 2016. Adobe Patch Tuesday updates for July 2019 address only 5 minor flaws.

Data breaches 52

Data breaches Spyware Advertising Government 52

Security Affairs

NOVEMBER 17, 2019

ZoneAlarm forum site hack exposed data of thousands of users. Microsoft Patch Tuesday updates fix CVE-2019-1429 flaw exploited in the wild. CVE-2019-3648 flaw in all McAfee AV allows DLL Hijacking. New TA2101 threat actor poses as government agencies to distribute malware.

DDOS 52

DDOS Spyware Advertising Ransomware 52

Security Affairs

SEPTEMBER 15, 2019

Experts found Joker Spyware in 24 apps in the Google Play store. Stealth Falcon New Malware Uses Windows BITS Service to Stealthy Exfiltrate Data. Million of Telestar Digital GmbH IoT radio devices can be remotely hacked. Robert Downey Jrs Instagram account has been hacked. SecurityAffairs – Newsletter, hacking).

Spyware 56

Spyware Advertising Hacking IoT 56

Security Affairs

APRIL 21, 2019

Attackers hacked support agent to access Microsoft Outlook email accounts. Locked Shields 2019 – Chapeau, France wins Cyber Defence Exercise. CVE-2019-0803 Windows flaw exploited to deliver PowerShell Backdoor. Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading. Kindle Edition. Paper Copy.

Computers and Electronics 63

Computers and Electronics Spyware Data breaches Advertising 63

Security Affairs

NOVEMBER 8, 2019

Recently, researchers warned of the first mass-hacking campaign exploiting the BlueKeep exploit , the attack aimed at installing a cryptocurrency miner on the infected systems. pic.twitter.com/VdiKoqAwkr — Kevin Beaumont (@GossiTheDog) November 2, 2019. huh, the EternalPot RDP honeypots have all started BSOD'ing recently.

Penetration Testing 65

Penetration Testing Malware Advertising Spyware 65