Security Affairs

JULY 30, 2024

A new version of the Mandrake Android spyware has been found in five apps on Google Play, which have been downloaded over 32,000 times since 2022. Researchers from Kaspersky discovered a new version of the Mandrake Android spyware in five app on Google Play, totaling over 32,000 downloads between 2022 and 2024.

Spyware 128

Spyware Malware Mobile Marketing 128

Security Affairs

SEPTEMBER 18, 2020

Singapore, 09/18/2020 — Group-IB , a global threat hunting and intelligence company headquartered in Singapore, evidenced the transformation of the threat portfolio over the first half of 2020. Secure web- phishing.

Phishing 136

Phishing Ransomware Spyware Banking 136

Security Affairs

JUNE 15, 2020

The Earth Empusa threat group is distributing new Android spyware, dubbed ActionSpy, through watering hole attacks to targets Turkic minority group. Attackers injected the malicious code to deploy the spyware in websites, some of them were actually fake. ” continues the analysis.

Spyware 107

Spyware Advertising Encryption Phishing 107

Security Affairs

APRIL 16, 2024

Researchers warn of a renewed cyber espionage campaign targeting users in South Asia with the Apple iOS spyware LightSpy Blackberry researchers discovered a renewed cyber espionage campaign targeting South Asia with an Apple iOS spyware called LightSpy.

Spyware 134

Spyware Mobile Malware Encryption 134

Security Affairs

MARCH 22, 2021

The Kaspersky ICS CERT published a report that provided details about the threat landscape for computers in the ICS engineering and integration sector in 2020. Kaspersky ICS CERT published a report that provided details about the threat landscape for ICS engineering and integration sector in 2020. In H2 2020, 39.3%

Engineering 142

Engineering VPN Accountability Software 142

Security Affairs

AUGUST 24, 2021

Citizen Lab uncovered a new zero-click iMessage exploit that was used to deploy the NSO Group’s Pegasus spyware on devices belonging to Bahraini activists. Researchers from Citizen Lab spotted a zero-click iMessage exploit that was used to deploy NSO Group’s Pegasus spyware on Bahraini activists’ devices.

Spyware 98

Spyware Surveillance Hacking Mobile 98

Security Affairs

OCTOBER 11, 2021

A Togolese human rights advocate was hit by mobile spyware that has been allegedly developed by an Indian firm called Innefu Labs. Experts believe the attackers used a spyware developed by an Indian company called Innefu Labs. In the past, the Donot Team spyware was found in attacks outside of South Asia. Pierluigi Paganini.

Spyware 102

Spyware Surveillance Accountability Mobile 102

Security Affairs

AUGUST 30, 2023

The campaigns observed by the researchers are likely active since July 2020 and since July 2022, respectively. The malware distributed by the nation-state actors is Android BadBazaar , which has been previously employed in attacks aimed at Uyghurs and other Turkic ethnic minorities. org) and a Telegram alternative app (flygram[.]org).”

Spyware 135

Spyware Accountability Malware Hacking 135

Security Affairs

JULY 21, 2021

FormBook is a data-stealing malware that is used in cyber espionage campaigns, like other spyware it is capable of extracting data from HTTP sessions, keystroke logging, stealing clipboard contents. “On February 6, 2020 a new era began: the era of the Formbook successor called XLoader. Pierluigi Paganini.

Spyware 114

Spyware Malware Cybercrime Advertising 114

Security Affairs

JULY 20, 2023

China-linked group APT41 was spotted using two previously undocumented Android spyware called WyrmSpy and DragonEgg China-linked APT group APT41 has been observed using two previously undocumented Android spyware called WyrmSpy and DragonEgg. Upon installing the two spyware, they request extensive device permissions.

Spyware 98

Spyware Surveillance Malware Mobile 98

Security Affairs

NOVEMBER 24, 2021

federal court for illegally targeting its customers with the surveillance spyware Pegasus. The complaint provides new information on how NSO Group infected victims’ devices with its Pegasus spyware. The post Apple sues NSO Group for abusing state-sponsored Pegasus spyware appeared first on Security Affairs.

Spyware 100

Spyware Surveillance Software Hacking 100

Security Affairs

SEPTEMBER 16, 2024

Apple drops its lawsuit against commercial spyware vendor NSO Group, due to the risk of “threat intelligence” information exposure. Apple is seeking to drop its lawsuit against Israeli spyware company NSO Group , citing the risk of “threat intelligence” information exposure.

Surveillance 121

Surveillance Spyware Risk Hacking 121

Security Affairs

JULY 12, 2020

The tech giant announced that the update will be effective starting from August 11, 2020. “In August 2020, the Google Ads Enabling Dishonest Behavior policy will be updated to clarify restrictions on advertising for spyware and surveillance technology.”reads ”reads the post published by Google.

Surveillance 141

Surveillance Spyware Advertising Marketing 141

Security Affairs

JUNE 2, 2022

Flubot has been active since Decemeber 2020, it was first observed targeting Spanish users. In March 2021, experts from Swiss security outfit PRODAFT estimated that the number of infected devices worldwide was approximately 60,000. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Spyware 102

Spyware Malware Banking Cybercrime 102

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. CVE-2019-8605 internally referred to as SockPort2 and publicly known as SockPuppet CVE-2020-3837 internally referred to and publicly known as TimeWaste. Pierluigi Paganini.

Surveillance 137

Surveillance Mobile Spyware Telecommunications 137

Security Affairs

OCTOBER 24, 2019

The Sweden government is going to authorize the use of spyware on suspects’ devices to spy on their communications and track them. ” Starting from March 1, 2020, the Police Authority, the Security Police, the Customs Administration and the Swedish Crime Agency will be granted extended powers with the proposal.

Spyware 75

Spyware Government Surveillance Encryption 75

Security Affairs

SEPTEMBER 13, 2021

In August, researchers from Citizen Lab spotted a zero-click iMessage exploit that was used to deploy NSO Group’s Pegasus spyware on Bahraini activists’ devices. We identified nine Bahraini activists whose iPhones were successfully hacked with NSO Group’s Pegasus spyware between June 2020 and February 2021.

Spyware 112

Spyware Surveillance Hacking Mobile 112

Security Affairs

DECEMBER 21, 2020

The attackers used an exploit chain named Kismet that was part of the arsenal of the controversial Pegasus spyware that is sold by the surveillance firm NSO Group. In July 2020, KISMET was a zero-day against at least iOS 13.5.1 ” reads the report published by the researchers. and could hack Apple’s then-latest iPhone 11.

Hacking 143

Hacking Surveillance Spyware Government 143

Security Affairs

DECEMBER 29, 2024

CISA adds Acclaim Systems USAHERDS flaw to its Known Exploited Vulnerabilities catalog U.S.

Spyware 60

Spyware IoT Malware Cybercrime 60

Security Affairs

FEBRUARY 6, 2022

One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream. Apple addressed the flaw used by the ForcedEntry exploit in September 2021, rendering both NSO and QuaDream’s spyware ineffective.

Surveillance 98

Surveillance Spyware Government Hacking 98

Security Affairs

OCTOBER 5, 2023

“The document said the exploit worked for Android versions 9 to 11, which was released in 2020, and that it took advantage of a flaw in the “image rendering library.” In 2020 and 2021, WhatsApp fixed three vulnerabilities — CVE-2020-1890, CVE-2020-1910, and CVE-2021-24041— that all involved how the app processes images.

Mobile 141

Mobile Marketing Spyware Surveillance 141

Security Affairs

APRIL 9, 2020

Group-IB’s Computer Emergency Response Team ( CERT-GIB ) analyzed hundreds of coronavirus-related phishing emails between February 13 and April 1, 2020. Spyware turned out to be the most common malware class hiding in fraudulent COVID-19 emails, with AgentTesla topping the list of phishers’ favorite strains. Source: CERT-GIB.

Phishing 143

Phishing Malware Spyware DDOS 143

Security Affairs

MAY 1, 2023

Researchers at the Lookout Threat Lab have discovered a new Android surveillance spyware, dubbed BouldSpy, that was used by the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). The researchers are tracking the spyware since March 2020, starting in 2023, multiple security experts [ 1 , 2 ] started monitoring its activity.

Surveillance 98

Surveillance Malware Spyware Accountability 98

Security Affairs

APRIL 26, 2020

Please give me your vote for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERS [link]. Are Maze operators behind the attack on the IT services giant Cognizant? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 122

Hacking Advertising Spyware Antivirus 122

CyberSecurity Insiders

SEPTEMBER 16, 2022

Often such outdated devices bring in digital troubles to medical facilities as they can affect patient data, pose a risk to information security and data integrity. Hackers are often in search of such flaws to launch cyber attacks like spyware or espionage related tools.

Cyber Attacks 95

Cyber Attacks Spyware Manufacturing Software 95

Security Affairs

OCTOBER 2, 2021

Researchers at New Zealand’s computer emergency response team (CERT NZ) spotted the fake security warnings used to deceive the Android users: “Your device is infected with the FluBot® malware. Android has detected that your device has been infected,” states the fake security warning observed by the researchers.

Banking 145

Banking Malware Spyware Passwords 145

Security Affairs

JULY 16, 2021

The spyware is able to steal SMS messages, contact lists, and device information and to sign victims up for premium service subscriptions. Since 2019 experts found many Joker apps on Google Play store, in September 2019 security experts at Google removed from the store 24 apps. . ” states a post published by the experts.

Malware 145

Malware Mobile Spyware Encryption 145

Security Affairs

NOVEMBER 24, 2020

The two apps were discovered by Palo Alto Networks, which identify them, along with other apps leaking data, using a machine learning (ML)-based spyware detection system. The code found in both apps allowed to gather device data, including model, MAC address, carrier information, and IMSI (International Mobile Subscriber Identity) number.

Data collection 118

Data collection Mobile Spyware Surveillance 118

Security Affairs

JUNE 11, 2021

.” In December 2020, researchers from Citizen Lab reported that at least 36 employees of the Qatari news channel were targeted in a cyber espionage campaign leveraging a zero-click iOS zero-day vulnerability to hack their iPhones.

Cyber Attacks 139

Cyber Attacks Media Hacking Spyware 139

Security Affairs

NOVEMBER 9, 2022

The researchers pointed out that the surveillance firm included in its spyware the exploits for these three vulnerabilities that were zero-day at the time of their exploitation. The experts revealed that the sample is dated back late 2020. Samsung phones that were running kernel 4.14.113 in late 2020 include the S10, A50, and A51.

Surveillance 131

Surveillance Spyware Mobile Manufacturing 131

Security Affairs

FEBRUARY 14, 2021

If you want to also receive for free the international press subscribe here. COMB breach: 3.2B COMB breach: 3.2B

Phishing 112

Phishing Spyware Data breaches Surveillance 112

Security Affairs

DECEMBER 30, 2019

The Assembly would set up a committee of international experts in 2020 that will be tasked with elaborating “a comprehensive international convention on countering the use of information and communications technologies for criminal purposes.” It will only serve to stifle global efforts to combat cybercrime.”

Cybercrime 94

Cybercrime Surveillance Spyware Government 94

Security Affairs

JULY 16, 2020

“The second half of 2020 will come with its surprises, after Alien, Eventbot and BlackRock we can expect that financially motivated threat actors will build new banking Trojans and continue improving the existing ones,” ThreatFabric concludes. The list of targeted apps includes cryptocurrency wallet applications (i.e.

Malware 131

Malware Banking Mobile Advertising 131

Security Affairs

AUGUST 16, 2020

gun exchange site on hacking forum Threat Report Portugal: Q2 2020 Emotet malware employed in fresh COVID19-themed spam campaign PoC exploit code for two Apache Struts 2 flaws available online XCSSET Mac spyware spreads via Xcode Projects. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 88

Hacking Spyware Advertising Passwords 88

Security Affairs

SEPTEMBER 27, 2020

The spyware is able to steal SMS messages, contact lists and device information along with to sign victims up for premium service subscriptions. “Once notified by us, the Google Android Security team took prompt action to remove the suspicious apps (listed below) from the Google Play store.”

Malware 145

Malware Advertising Spyware Encryption 145

Security Affairs

JUNE 5, 2022

Unpatched critical Atlassian Confluence Zero-Day RCE flaw actively exploited Microsoft blocked Polonium attacks against Israeli organizations LockBit ransomware attack impacted production in a Mexican Foxconn plant Conti leaked chats confirm that the gang’s ability to conduct firmware-based attacks An international police operation dismantled FluBot (..)

Spyware 106

Spyware Firmware Ransomware Scams 106

Security Affairs

MARCH 8, 2020

pic.twitter.com/StU68THrXy — MalwareHunterTeam (@malwrhunterteam) March 6, 2020. The final payload is the FormBook information-stealing Trojan, a malware that was first spotted by researchers at FireEye in October 2017. Payload: Formbook (thx @James_inthe_box ).

Malware 145

Malware Scams Social Engineering Phishing 145