Security Affairs

NOVEMBER 16, 2019

The popular messaging platform WhatsApp made the headlines again, a new bug could be exploited by hackers to secretly install spyware. According to the website The Hacker News, WhatsApp has recently fixed a critical vulnerability, tracked as CVE-2019-11931, that could have allowed attackers to remotely compromise targeted devices.

Spyware 97

Spyware Advertising Mobile Information Security 97

Security Affairs

MAY 29, 2023

Cisco Talos and the Citizen Lab researchers have published a technical analysis of the powerful Android spyware Predator. Security researchers at Cisco Talos and the Citizen Lab have shared technical details about a commercial Android spyware named Predator that is sold by the surveillance firm Intellexa (formerly known as Cytrox).

Spyware 89

Spyware Surveillance Media Malware 89

Malwarebytes

JUNE 29, 2022

Google’s Threat Analysis Group (TAG) has revealed a sophisticated spyware activity involving ISPs (internet service providers) aiding in downloading powerful commercial spyware onto users’ mobile devices. The spyware, dubbed Hermit, is reported to have government clients much like Pegasus.

Spyware 105

Spyware Government Social Engineering Mobile 105

Adam Levin

FEBRUARY 25, 2020

The number of stalkerware apps detected on smartphones increased in 2019, a full 60% over the previous year according to a new report released by Kaspersky Labs. . This is thought to be the way Amazon founder and CEO Jeff Bezos was hacked in 2019. The post Stalkerware Installations Up 60% in 2019 appeared first on Adam Levin.

Mobile 236

Mobile Malware Phishing Authentication 236

Security Affairs

APRIL 19, 2022

Researchers from Citizen Lab have published a report detailing the use of a new zero-click iMessage exploit, dubbed HOMAGE, to install the NSO Group Pegasus spyware on iPhones belonging to Catalan politicians, journalists, academics, and activists. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook.

Spyware 90

Spyware Surveillance Government Software 90

Bleeping Computer

DECEMBER 27, 2023

The Operation Triangulation spyware attacks targeting iPhone devices since 2019 leveraged undocumented features in Apple chips to bypass hardware-based security protections. [.]

Spyware 142

Spyware Mobile 142

eSecurity Planet

SEPTEMBER 14, 2021

Apple continues to be haunted by spyware developed by an Israeli security firm that hostile governments used to hack into Apple devices to spy on journalists, activists and world leaders (see Apple Security Under Scrutiny Amid Fallout from NSO Spyware Scandal ). operating system was being exploited by the invasive Pegasus spyware.

Spyware 118

Spyware Mobile Engineering Government 118

Security Affairs

JUNE 22, 2020

Researchers at Amnesty International collected evidence that a Moroccan journalist was targeted with network injection attacks using NSO Group ‘s spyware. ” The analysis of Omar Radi’s iPhone suggests network injection attacks took place on 27 th January, 11 th February, and 13 th of September 2019. .”

Spyware 112

Spyware Surveillance Mobile Advertising 112

Security Affairs

NOVEMBER 11, 2022

The threat actors behind the campaigns used two Android spyware to spy on the victims and steal sensitive information. The campaigns involved a new piece of malware called BadBazaar and new variants of the MOONSHINE surveillance software discovered by Citizen Lab in 2019 and employed in attacks against Tibetan activists. .

Surveillance 89

Surveillance Spyware Malware Mobile 89

Security Affairs

OCTOBER 11, 2021

A Togolese human rights advocate was hit by mobile spyware that has been allegedly developed by an Indian firm called Innefu Labs. Experts believe the attackers used a spyware developed by an Indian company called Innefu Labs. In the past, the Donot Team spyware was found in attacks outside of South Asia. Pierluigi Paganini.

Spyware 81

Spyware Surveillance Accountability Mobile 81

Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Spyware 76

Spyware Surveillance Telecommunications Mobile 76

Dark Reading

JUNE 16, 2022

The commercial-grade surveillance software initially was used by law enforcement authorities in Italy in 2019, according to a new report.

Spyware 98

Spyware Surveillance Software 98

Heimadal Security

MAY 19, 2021

According to a new study, Android stalker and spyware detection suddenly increased by 48% in the past year. The post Android Stalkerware Rising: Research Indicates 48% More Android Stalkerware Detections in 2020 than in 2019 appeared first on Heimdal Security Blog.

Spyware 57

Spyware Cybersecurity 57

Security Affairs

JULY 11, 2019

Malware researchers from Kaspersky have discovered new and improved versions of the infamous FinFisher spyware used to infect both Android and iOS devices. Experts at Kaspersky have discovered a new improved variant of the FinFisher spyware used to spy on both iOS and Android users in 20 countries. Pierluigi Paganini.

Spyware 98

Spyware Mobile Advertising Architecture 98

Security Affairs

AUGUST 22, 2019

The popular malware researcher Lukas Stefanko from ESET discovered that a malicious spyware, built on the AhMyth open-source espionage tool, was uploaded on Google Play twice over two weeks, bypassing Google security checks. The researchers first discovered the app on Google Play on July 2, 2019, then it was removed within 24 hours.

Spyware 79

Spyware Advertising Malware Mobile 79

CSO Magazine

JUNE 2, 2023

According to the company's analysis of infected devices, the operation has been ongoing since at least 2019 and starts with victims receiving an invisible message over the ​​iMessage application with an attachment that initiates an exploit chain and then deletes itself.

Spyware 108

Spyware Antivirus 108

Security Affairs

MARCH 13, 2019

One of the zero-day flaws ( CVE-2019-0797 ) patched this week by Microsoft has been exploited in targeted attacks by several threats groups, including FruityArmor and SandCat APT groups. “In addition to CVE-2019-0797 and CHAINSHOT , SandCat also uses the FinFisher /FinSpy framework.” Pierluigi Paganini.

Spyware 92

Spyware Advertising Government Hacking 92

The Hacker News

JUNE 17, 2022

An enterprise-grade surveillanceware dubbed Hermit has been put to use by entities operating from within Kazakhstan, Syria, and Italy over the years since 2019, new research has revealed. Lookout attributed the spy software, which is equipped to target both Android and iOS, to an Italian company named RCS Lab S.p.A

Spyware 91

Spyware Software 91

Security Affairs

MARCH 5, 2020

China-linked cyber espionage groups increasingly targeted organizations in the telecommunications industry in 2019. “Analysis in 2019 revealed a focus by Chinese adversaries on the telecommunications sector, which could support both signals intelligence and further upstream targeting. ” reads the report. .

Telecommunications 87

Telecommunications Mobile Spyware Advertising 87

Threatpost

APRIL 8, 2019

The surveillance tool was signed with legitimate Apple developer certificates.

Spyware 83

Spyware Surveillance Mobile Malware 83

Zero Day

JULY 26, 2021

The officials were allegedly targeted in attacks dating back to 2019.

Spyware 124

Spyware Government 124

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The binaries are obfuscated and do some checks to detect if the spyware is running in a Virtual Machine. ” reads the Amnesty’s report.

Spyware 138

Spyware Surveillance Mobile Advertising 138

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. CVE-2019-8605 internally referred to as SockPort2 and publicly known as SockPuppet CVE-2020-3837 internally referred to and publicly known as TimeWaste. Pierluigi Paganini.

Surveillance 109

Surveillance Mobile Spyware Telecommunications 109

Security Affairs

APRIL 13, 2022

One of the officials targeted with the infamous spyware there is Didier Reynders, a senior Belgian statesman who has served as the European Justice Commissioner since 2019. The Pegasus spyware used the ForcedEntry zero-day exploit to compromise the recipients’ devices without their interaction.

Surveillance 91

Surveillance Software Spyware Hacking 91

Security Affairs

FEBRUARY 6, 2022

One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream. Apple addressed the flaw used by the ForcedEntry exploit in September 2021, rendering both NSO and QuaDream’s spyware ineffective.

Surveillance 94

Surveillance Spyware Government Hacking 94

Malwarebytes

JANUARY 11, 2023

On Monday, the US Supreme Court denied the NSO Group's petition for a writ of certiorari , a request to the high court to review its case, signaling that Meta's WhatsApp can go ahead with its case against the Israeli-based company behind the Pegasus spyware. The court didn't explain why it refused to hear the NSO's appeal.

Spyware 89

Spyware Surveillance Government Internet 89

Malwarebytes

APRIL 14, 2022

This decrease in stalkerware-type activity never reached the lower levels in 2019 that Malwarebytes recorded before the start of the global coronavirus pandemic, which was recognized in 2020 and which spread quickly across the globe beginning in the months of February, March, and April. This represents a 4.2 What’s at play here?

Spyware 133

Spyware Antivirus Technology Government 133

NopSec

MARCH 20, 2019

CVE-2019-0797 – Windows Zero-Day Vulnerability Description CVE-2019-0797 is one of the three zero-day vulnerabilities (one in Chrome, the other two in Windows) that we touched upon in our last week’s post. Click Here The post Trending CVEs for the Week of March 18th, 2019 appeared first on NopSec.

Spyware 40

Spyware Accountability Malware Risk 40

Security Affairs

OCTOBER 14, 2020

The authorities started the investigation last year after the German blog Netzpolitik and some advocacy groups (Reporters Without Borders, Society for Freedom Rights, and the European Center for Constitutional and Human Rights), filed a complaint with Munich prosecutors in the summer of 2019.

Surveillance 109

Surveillance Spyware Software Advertising 109

Security Affairs

AUGUST 30, 2019

Threat actors used at least five unique iPhone exploit chains that allowed them to remotely jailbreak a device and deliver spyware. Project Zero Team Lead Ben Hawkes revealed that both CVE-2019-7286 and CVE-2019-7287 have been exploited in the wild. — Ben Hawkes (@benhawkes) February 7, 2019. on 7 Feb 2019.

Spyware 87

Spyware Hacking Advertising Encryption 87

The Last Watchdog

MAY 8, 2019

And earlier this year, three popular “ selfie beauty apps ”– Pro Selfie Beauty Camera, Selfie Beauty Camera Pro and Pretty Beauty Camera 2019 – accessible in Google Play Store were revealed to actually be tools to spread adware and spyware. Adware are unwanted ads that redirect you to sketchy webpages, and spyware collects your data.

Adware 176

Adware Spyware Mobile Banking 176

Security Affairs

MARCH 7, 2021

In April 2019, a major and orchestrated misinformation cyber attack hit the Lithuanian Defense Minister Raimundas Karoblis with the intent of discrediting him and the Lithuanian national defense system. In December 2016, Lithuania blamed Russia for cyber attacks that hit government networks over the previous two years.

Spyware 126

Spyware Cyber Attacks Government Hacking 126

Security Affairs

APRIL 8, 2020

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. In May, Facebook has patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568 , that has been exploited to remotely install spyware on phones by calling the targeted device.

Surveillance 99

Surveillance Spyware Advertising Government 99

Security Affairs

DECEMBER 21, 2020

The attackers used an exploit chain named Kismet that was part of the arsenal of the controversial Pegasus spyware that is sold by the surveillance firm NSO Group. These surgical attacks took place between July and August 2020, but experts speculate the attack are going on since at least October 2019.

Hacking 128

Hacking Surveillance Spyware Government 128

Security Affairs

SEPTEMBER 18, 2020

Every third email, meanwhile, contained spyware , which is used by threat actors to steal payment data or other sensitive info to then put it on sale in the darknet or blackmail its owner. Another 17 percent contained downloaders, while backdoors and banking Trojans came third with a 16- and 15-percent shares, respectively.

Phishing 102

Phishing Ransomware Spyware Banking 102

Security Affairs

OCTOBER 5, 2020

The experts were investigating several suspicious UEFI firmware images when discovered four components, some of which were borrowing the source code a Hacking Team spyware. Kaspersky researchers revealed to have found MosaicRegressor components at several dozen entities between 2017 and 2019.

Firmware 125

Firmware Spyware Surveillance Hacking 125

Threatpost

AUGUST 7, 2019

From government surveillance to domestic abuse, technology is being used in new and disturbing ways that threaten human rights - how can the security industry fight back?

Surveillance 83

Surveillance Government Technology Spyware 83