Security Affairs

MARCH 13, 2025

North Korea-linked APT group ScarCruft used a new Android spyware dubbed KoSpy to target Korean and English-speaking users. North Korea-linked threat actor ScarCruft (aka APT37 , Reaper, and Group123) is behind a previously undetected Android surveillance tool namedKoSpythat was used to target Korean and English-speaking users.

Spyware 77

Spyware Surveillance Encryption Malware 77

Security Affairs

NOVEMBER 16, 2024

Court filing revealed that NSO Group used WhatsApp exploits after the instant messaging firm sued the surveillance company. NSO Group developed malware that relied on WhatsApp exploits to infect target individuals even after the Meta-owned instant messaging company sued the surveillance firm. from April 29, 2018, to May 10, 2020).

Spyware 118

Spyware Surveillance Malware Hacking 118

Security Affairs

APRIL 8, 2025

In March 2025, WhatsApp addressed a zero-click, zero-day vulnerability exploited to install Paragons Graphite spyware on the devices of targeted individuals. WhatsApp blocked a spyware campaign by Paragon targeting journalists and civil society members after reports of the Citizen Lab group from the University of Toronto.

Spyware 116

Spyware Media Surveillance Hacking 116

Security Affairs

DECEMBER 12, 2024

Chinese law enforcement uses the mobile surveillance tool EagleMsgSpy to gather data from Android devices, as detailed by Lookout. Researchers at the Lookout Threat Lab discovered a surveillance tool, dubbed EagleMsgSpy, used by Chinese law enforcement to spy on mobile devices. ” reads the report published by Lookout.

Surveillance 64

Surveillance Mobile Spyware Malware 64

SecureList

NOVEMBER 28, 2024

This is our latest roundup, covering activity we observed during Q3 2024. Earlier in 2024, a secure USB drive was found to be compromised and malicious code was injected into the access management software installed on the USB drive. After that, we did not observe any new activity related to this actor until mid-July 2024.

Malware 117

Malware Government Software Spyware 117

Security Affairs

JANUARY 27, 2025

Usually, such kinds of vulnerabilities are exploited by nation-state actors or commercial surveillance spyware vendors in targeted attacks. In 2024, Apple addressed six zero-day vulnerabilities in its products. As usual, the company did not share details regarding the attacks exploiting the flaw.

Spyware 120

Spyware Surveillance Media Hacking 120

Malwarebytes

APRIL 11, 2025

The US State Department reportedly plans to sign an international agreement designed to govern the use of commercial spyware known as the Pall Mall Pact. The Pall Mall Pact, formally known as the Pall Mall Process, was initiated by France and the United Kingdom in February 2024. Privacy is more than a personal concern.

Spyware 77

Spyware Surveillance Government VPN 77

Security Affairs

MAY 30, 2024

Researchers spotted a macOS version of the LightSpy surveillance framework that has been active in the wild since at least January 2024. Researchers from ThreatFabric discovered a macOS version of the LightSpy spyware that has been active in the wild since at least January 2024.

Spyware 137

Spyware Malware Surveillance Mobile 137

Security Affairs

SEPTEMBER 22, 2023

Citizen Lab and Google’s TAG revealed that the three recently patched Apple zero-days were used to install Cytrox Predator spyware. citizenlab in coordination with @Google ’s TAG team found that former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s #Predator #spyware through links sent via SMS and WhatsApp.

Spyware 128

Spyware Surveillance Hacking Mobile 128

Security Affairs

MARCH 3, 2025

Amnesty International first found traces of this Cellebrite USB exploit used in a separate case in mid-2024.” ” In 2024, the Security Lab provided evidence of a Cellebrite zero-day exploit chain to industry partners, leading Google to identify three vulnerabilities. .”

Hacking 68

Hacking Spyware Technology Surveillance 68

Security Affairs

JANUARY 19, 2025

CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems Russia-linked APT Star Blizzard targets WhatsApp accounts Prominent US law firm Wolf Haldenstein disclosed a data breach Clop Ransomware exploits Cleo File Transfer flaw: dozens (..)

Spyware 70

Spyware Data breaches DNS Artificial Intelligence 70

Security Affairs

FEBRUARY 9, 2025

US Justice Department says cybercrime forum allegedly affected 17 million Americans Cybercrime is increasingly complex.

Spyware 61

Spyware Cybercrime Scams Social Engineering 61

Security Boulevard

MARCH 24, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. This vulnerability was patched by Apple in December 2024, but they only disclosed it recently. Privacy Tools and Services Primarily covers tools and services with a focus on maintaining/improving/respecting user privacy.

Surveillance 75

Surveillance Telecommunications Data breaches Spyware 75

Security Affairs

FEBRUARY 11, 2024

Gov imposes visa restrictions on individuals misusing Commercial Spyware HPE is investigating claims of a new security breach Experts warn of a surge of attacks targeting Ivanti SSRF flaw How to hack the Airbus NAVBLUE Flysmart+ Manager Crooks stole $25.5

Spyware 125

Spyware Surveillance DDOS Identity Theft 125

Security Affairs

NOVEMBER 24, 2024

CISA adds Progress Kemp LoadMaster, Palo Alto Networks PAN-OS and Expedition bugs to its Known Exploited Vulnerabilities catalog Great Plains Regional Medical Center ransomware attack impacted 133,000 individuals Recently disclosed VMware vCenter Server bugs are actively exploited in attacks Foreign adversary hacked email communications of the Library (..)

Cybercrime 71

Cybercrime Artificial Intelligence Hacking VPN 71

Security Affairs

DECEMBER 12, 2024

The Russia-linked APT Gamaredon used two new Android spyware tools calledBoneSpyandPlainGnome against former Soviet states. Lookout researchers linked the BoneSpy and PlainGnome Android surveillance families to the Russian APT group Gamaredon (a.k.a. These findings tie the mobile surveillance families to Gamaredons desktop campaigns.

Mobile 98

Mobile Malware Surveillance Social Engineering 98

SecureList

JUNE 3, 2024

IT threat evolution Q1 2024 IT threat evolution Q1 2024. Mobile statistics IT threat evolution Q1 2024. This RAT allows an attacker to surveil and harvest sensitive data from a target computer. DinodasRAT is a multi-platform backdoor written in C++ that offers a range of capabilities.

Banking 116

Banking Malware Computers and Electronics Mobile 116

SecureList

NOVEMBER 14, 2023

In this article, we will review the past year’s trends to see which of our 2023 predictions have come true, and try to predict what is to come in 2024. This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. The trend may evolve in various ways.

Hacking 140

Hacking Energy and Utilities Malware Media 140

SecureList

MARCH 13, 2024

In most countries around the world, use of stalkerware is currently not prohibited, but installing a surveillance application on another person’s smartphone without their consent is illegal and punishable. Nevertheless, iPhone users fearing surveillance should always keep a close eye on their device. from 70 percent.

Mobile 108

Mobile Passwords Surveillance Technology 108

Security Affairs

SEPTEMBER 1, 2024

CISA adds Google Chromium V8 bug to its Known Exploited Vulnerabilities catalog Young Consulting data breach impacts 954,177 individuals BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024-37085 US offers $2.5M reward for Belarusian man involved in mass malware distribution U.S.

Surveillance 120

Surveillance Malware Firewall Phishing 120

Security Affairs

DECEMBER 15, 2024

CISA adds Cleo Harmony, VLTrader, and LexiCom flaw to its Known Exploited Vulnerabilities catalog German agency BSI sinkholed a botnet of 30,000 devices infected with BadBox U.S.

Firewall 64

Firewall Spyware Surveillance Cybercrime 64

Google Security

MAY 15, 2024

Advanced cellular security to fight fraud and surveillance We’re adding new advanced cellular protections in Android 15 to defend against abuse by criminals using cell site simulators to snoop on users or send them SMS-based fraud messages. These features require device OEM integration and compatible hardware.

Scams 79

Scams Threat Detection Social Engineering Surveillance 79

Security Affairs

SEPTEMBER 9, 2024

Researchers warn of a fresh cluster of activity associated with the Predator spyware using a new infrastructure, following the U.S. Recorded Future researchers warn that the Predator spyware has resurfaced with fresh infrastructure after a decline caused by US sanctions against Intellexa Consortium.

Spyware 136

Spyware Surveillance Government Risk 136

Security Affairs

MARCH 5, 2024

government sanctioned two individuals and five entities linked to the development and distribution of the Predator spyware used to target Americans. The surveillance software was also used to spy on U.S. The Department of the Treasury warns that the proliferation of commercial spyware poses growing risks to the United States.

Spyware 133

Spyware Surveillance Government Technology 133

Security Affairs

SEPTEMBER 18, 2024

The Department of the Treasury’s Office of Foreign Assets Control (OFAC) issued new sanctions against five individuals and one entity associated with the Intellexa Consortium for their role in developing, operating, and distributing commercial spyware. Predator spyware is known for its extensive data-stealing and surveillance capabilities.

Spyware 124

Spyware Surveillance Government Technology 124

SecureWorld News

JANUARY 9, 2025

Protecting military mobile devices Standards and policies will be implemented to secure Department of Defense mobile devices from foreign spyware. Agencies must report any compromises involving foreign spyware over the past two years. In the first half of 2024, ransomware victims paid an astonishing $459.8

Cybersecurity 109

Cybersecurity Manufacturing Surveillance Ransomware 109

Security Affairs

JUNE 16, 2025

Insik Group analyzed the new Predator spyware infrastructure and discovered it’s still gaining users despite U.S. sanctions and public exposure, Predator spyware has resurged. The surveillance software was also used to spy on U.S. Predator spyware is known for its extensive data-stealing and surveillance capabilities.

Spyware 72

Spyware Surveillance Software Marketing 72

Security Affairs

FEBRUARY 27, 2025

A report published by Amnesty International in December 2024 documented the use of Cellebrites forensics tools by Serbia policeto unlock and install spyware on the phones of a local journalist and an activist. NoviSpy is less advanced than other spyware like NSO Group’s Pegasus. ” reported Amnesty International.

Spyware 103

Spyware Surveillance Technology Mobile 103

Security Affairs

MAY 7, 2025

jury ordered NSO Group to pay WhatsApp over $167M for using Pegasus spyware to target over 1,400 people, violating U.S. court over exploiting a vulnerability to deliver Pegasus spyware. Will Cathcart of WhatsApp called the ruling a major privacy victory, emphasizing accountability for spyware firms after a five-year legal battle.

Spyware 116

Spyware Surveillance Malware Hacking 116

Security Affairs

MARCH 2, 2025

Spreads via Impersonation of Official Email to Target Users in Taiwan Belgian prosecutor probes alleged Chinese hacking of intelligence service Exclusive: Hegseth orders Cyber Command to stand down on Russia planning Cybersecurity Trump 2.0

Cybercrime 61

Cybercrime Hacking Ransomware Cryptocurrency 61

Security Affairs

SEPTEMBER 22, 2024

CISA adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and Microsoft SQL Server bugs to its Known Exploited Vulnerabilities catalog SIEM for Small and Medium-Sized Enterprises: What you need to know Antivirus firm Dr.Web disconnected all servers following a cyberattack Experts warn of China-linked APT’s (..)

Surveillance 120

Surveillance Cryptocurrency Spyware Phishing 120

Security Affairs

DECEMBER 22, 2024

million individuals The FBI warns of HiatusRAT scanning campaigns against Chinese-branded web cameras and DVRs Russia FSB relies on Ukrainian minors for criminal activities disguised as “quest games” U.S.

Data breaches 61

Data breaches Cybercrime Spyware Firmware 61