Security Affairs

MAY 16, 2019

During the last month, our Threat Intelligence surveillance team spotted increasing evidence of an operation intensification against the Banking sector. The piece of malware under analysis were downloaded from “bullettruth[.com/out[.exe”, Figure 3: Malware Signature by SLON LTD. Figure 4: Malware suspicious entropy level.

Banking 70

Banking Malware Surveillance Retail 70

The Last Watchdog

OCTOBER 3, 2019

Related: How ransomware became a scourge Specialists get assigned to poke around, locate key servers and find stealthy paths to send in more malware. Once they were inside, they would turn off your antivirus software and the software responsible for online backups. “Once they’re in the front door, now the humans get involved.”

Encryption 147

Encryption Malware Ransomware Cyber Attacks 147

Security Affairs

JULY 28, 2022

Microsoft linked a private-sector offensive actor (PSOA) to attacks using multiple zero-day exploits for its Subzero malware. The group targets entities in Europe and Central America with a surveillance tool dubbed Subzero. Confirm that Microsoft Defender Antivirus is updated to security intelligence update 1.371.503.0

Surveillance 89

Surveillance Malware Authentication DNS 89

DoublePulsar

APRIL 20, 2023

Here’s a writeup from Kroll on a typical Black Basta incident: Qakbot has been around for many years, and is under heavy surveillance by both commercial CTI providers and independent security researchers. It is a serious threat to all organisations which should be met with both a response by government, and businesses.

Ransomware 129

Ransomware Government Data breaches Media 129

Hackology

NOVEMBER 11, 2023

Kamran Spyware: An Overview The Kamran spyware can be summarized as a sophisticated Android malware targeting regional news website users. Additionally, implementing strong security measures, such as regularly updating software and using reliable antivirus software, can help detect and prevent the infiltration of Kamran spyware.

Spyware 45

Spyware Malware Risk Mobile 45

Security Affairs

JULY 22, 2022

The spyware developed by Israeli surveillance firm Candiru exploited recently fixed CVE-2022-2294 Chrome zero-day in attacks on journalists. ” The zero-day was chained with a sandbox escape exploit, but experts were not able to recover it due to the protection implemented by the malware. SecurityAffairs – hacking, Candiru).

Spyware 89

Spyware Surveillance Antivirus Malware 89

SecureList

FEBRUARY 26, 2021

The Coalition Against Stalkerware warns that stalkerware “may facilitate intimate partner surveillance, harassment, abuse, stalking, and/or violence.” They still need physical access to the phone to jailbreak it, so iPhone users who fear surveillance should always keep an eye on their device.

Mobile 80

Mobile Surveillance Software Passwords 80

Security Affairs

SEPTEMBER 15, 2023

Leading Android health apps expose users to avoidable threats like surveillance and identity theft, due to their risky permissions. Malware can use this permission to plant harmful files or steal sensitive information. antivirus) require this access, malicious apps could abuse it to take full control of your device.

Accountability 103

Accountability Mobile Surveillance Information Security 103

Security Affairs

FEBRUARY 19, 2023

Twitter will allow using the SMS-based two-factor authentication (2FA) only to its Blue subscribers GoDaddy discloses a new data breach Fortinet fixes critical vulnerabilities in FortiNAC and FortiWeb German airport websites hit by DDos attacks once again Cisco fixed critical RCE bug in ClamAV Open-Source Antivirus engine CISA adds Cacti, Office, Windows (..)

DDOS 83

DDOS Data breaches Surveillance Ransomware 83

Spinone

NOVEMBER 21, 2019

The course consists of four modules: Hackers Exposed: You will find out methods that stop hackers, block tracking, and prevent government surveillance. Endpoint Protection: Discover how to use antivirus software, learn about malware, encryption and application control. No hacking or programming experience is needed.

Social Engineering 40

Social Engineering Accountability Phishing Cybersecurity 40

SecureList

MAY 31, 2021

Out of the 18,000 Orion IT customers affected by the malware, it seems that only a handful were of interest to the attackers. For example, before making the first internet connection to its C2s, the Sunburst malware lies dormant for up to two weeks, preventing easy detection of this behaviour in sandboxes.

Malware 93

Malware Adware Encryption Architecture 93

SecureList

APRIL 27, 2021

In our initial report on Sunburst , we examined the method used by the malware to communicate with its C2 (command-and-control) server and the protocol used to upgrade victims for further exploitation. This campaign made use of a previously unknown malware family we dubbed FourteenHi.

Malware 137

Malware Spyware Government Social Engineering 137

Security Affairs

JULY 7, 2019

Vulnerability in Medtronic insulin pumps allow hacking devices. Firefox finally addressed the Antivirus software TLS Errors. China installs a surveillance app on tourists phones while crossing in the Xinjiang. Cryptomining Campaign involves Golang malware to target Linux servers. Is Your Browser Secure?

Scams 47

Scams Spyware DNS Advertising 47

ForAllSecure

OCTOBER 5, 2021

It was for 1000s of compromised, Internet of Things, enabled devices, such as surveillance cameras, residential gateways, internet connected printers, and even in home baby monitors these devices themselves are often thought of as not having much in the way of resources, and really they don't have many computing resources.

IoT 52

IoT DDOS Malware Internet 52

SecureList

NOVEMBER 14, 2022

The cyber-offense ecosystem still appears to be shaken by the sudden demise of NSO Group; at the same time, these activities indicate to us that we’ve only seen the tip of the iceberg when it comes to commercial-grade mobile surveillance tooling. One glaring example is Iran, which faced a series of spectacular hacks and sabotages.

Firmware 105

Firmware Surveillance Mobile Telecommunications 105