Remove Accountability Remove Advertising Remove Data collection Remove Spyware
article thumbnail

For 2nd Time in 3 Years, Mobile Spyware Maker mSpy Leaks Millions of Sensitive Records

Krebs on Security

Less than a week ago, security researcher Nitish Shah directed KrebsOnSecurity to an open database on the Web that allowed anyone to query up-to-the-minute mSpy records for both customer transactions at mSpy’s site and for mobile phone data collected by mSpy’s software. The database required no authentication. .”

Spyware 183
article thumbnail

Ransomware en masse on the wane: top threats inside web-phishing in H1 2020

Security Affairs

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Online services are followed by email service providers (24%), whose share, after a decline in 2019, resumed growth in 2020, and financial organizations (11%).

Phishing 105
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Spam and phishing in 2022

SecureList

For example, one website offered users to obtain a COVID vaccination certificate by entering their British National Health Service (NHS) account credentials. Scammers abused legitimate survey services by creating polls in the name of various organization to profit from victims’ personal, including sensitive, data.

article thumbnail

Security Affairs newsletter Round 223 – News of the week

Security Affairs

A flaw could have allowed hackers to take over any Instagram account in 10 minutes. Mysterious hackers steal data of over 70% of Bulgarians. Sprint revealed that hackers compromised some customer accounts via Samsung site. Experts spotted a rare Linux Desktop spyware dubbed EvilGnome. Scraping the TOR for rare contents.

article thumbnail

Advanced threat predictions for 2024

SecureList

Using a malicious script, the attackers redirected their targets’ incoming email to an email address controlled by the attackers, gathering data from the compromised accounts. This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware.

Hacking 108