article thumbnail

New Screenshotter Malware Performs Surveillance Before Stealing Data

Heimadal Security

A new custom-made malware, the Screenshotter, surveils the victims before stealing data. Researchers first spotted the campaign in October 2022, but its activity increased in 2023. The threat actor called TA886 is utilizing this malware to target users from the United States and Germany.

article thumbnail

Iranian govt uses BouldSpy Android malware for internal surveillance operations

Security Affairs

Researchers at the Lookout Threat Lab have discovered a new Android surveillance spyware, dubbed BouldSpy, that was used by the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). The researchers are tracking the spyware since March 2020, starting in 2023, multiple security experts [ 1 , 2 ] started monitoring its activity.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog

Security Affairs

Five of the issues added by CISA to its catalog are part of the exploits used by surveillance vendors to target mobile devices with their commercial spyware: CVE-2021-30900 – Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability. CISA orders federal agencies to fix this flaw by April 20, 2023.

Spyware 75
article thumbnail

Surveillance camera insecurities argument comes to one inevitable conclusion: Always update

Malwarebytes

Chinese-made surveillance cameras find themselves in a spot of controversy, after a BBC investigation uncovered flaws in devices during several brand tests. Surveillance and webcam vulnerabilities are common, and we’ve covered them many times on our blog.

article thumbnail

Privacy predictions 2023

SecureList

In the US, for example, the FTC has requested public comments on the “prevalence of commercial surveillance and data security practices that harm consumers” to inform future legislation. Here we take a look at the most important developments that, in our opinion, will affect online privacy in 2023.

Insurance 108
article thumbnail

Security Roundup December 2023

BH Consulting

Cloud security was also a theme in Microsoft’s ‘Cybersecurity Trends in Ireland 2023’ report. Sounds like excessive surveillance? Privacy group the Electronic Frontier Federation welcomed Meta’s decision which would protect users from dragnet surveillance of the contents of their Facebook messages, “and not a moment too soon”.

article thumbnail

Advanced threat predictions for 2023

SecureList

We polled our experts from the GReAT team and have gathered a small number of key insights about what APT actors are likely to focus on in 2023. Last June, Google’s TAG team released a blog post documenting attacks on Italian and Kazakh users that they attribute to RCS Lab, an Italian offensive software vendor.

Firmware 110