article thumbnail

Apple patches ‘worst macOS bug in recent memory’ after it was used in the wild

SC Magazine

allowed hackers to circumvent much of Apple’s built-in malware detection for programs downloaded from the internet. ” An adware group had already been using the bug in the wild. allowed hackers to circumvent much of Apple’s built-in malware detection for programs downloaded from the internet.

Adware 126
article thumbnail

Threat in your browser: what dangers innocent-looking extensions hold for users

SecureList

For instance, when an account of the developer of a popular add-on was hijacked after a phishing attack, millions of users received adware on their devices without their knowledge. In that way, over 30,000 users got adware after an installed extension, dubbed Particle, was sold to new developers and later modified to inject ads into websites.

Adware 105
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Breach Exposes Users of Microleaves Proxy Service

Krebs on Security

Launched in 2013, Microleaves is a service that allows customers to route their Internet traffic through PCs in virtually any country or city around the globe. Microleaves works by changing each customer’s Internet Protocol (IP) address every five to ten minutes. Which hints at a possible BOTNET. “Online[.]io

article thumbnail

Security Affairs newsletter Round 432 by Pierluigi Paganini – International edition

Security Affairs

Police dismantled bulletproof hosting service provider Lolek Hosted Python URL parsing function flaw can enable command execution UK govt contractor MPD FM leaks employee passport data Power Generator in South Africa hit with DroxiDat and Cobalt Strike The Evolution of API: From Commerce to Cloud Gafgyt botnet is targeting EoL Zyxel routers Charming (..)

article thumbnail

macOS: Bashed Apples of Shlayer and Bundlore

Security Affairs

Though these scripts have slight variations, they mostly belong to a plague of adware strains— Shlayer and Bundlore. The malicious shell scripts used by Shlayer and Bundlore are usually malvertising-focused adware bundlers using shell scripts in the kill chain to download and install an adware payload. Pierluigi Paganini.

Adware 119
article thumbnail

Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading

Security Affairs

Although the campaign has not reached the magnitude of the Zacinlo adware campaign, it is already infecting users worldwide.” The main dropper is able to steal browser cookies and login credentials from Google Chrome, Chromium, Mozilla Firefox, Opera, Microsoft Edge, Internet Explorer, Baidu Browser and Yandex.

Spyware 68
article thumbnail

OpenSSH trojan campaign targets Linux systems and IoT devices

Malwarebytes

Poorly configured Linux and Internet of Things (IoT) devices are at risk of compromise from a cryptojacking campaign , according to researchers at Microsoft. Years ago you’d occasionally see adware programs try to remove rivals from a PC, in order to take all of the ad revenue for its creator.

IoT 83