Remove Architecture Remove Encryption Remove Spyware Remove Surveillance
article thumbnail

Unknown FinSpy Mac and Linux versions found in Egypt

Security Affairs

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The binaries are obfuscated and do some checks to detect if the spyware is running in a Virtual Machine. ” reads the Amnesty’s report.

Spyware 138
article thumbnail

FinSpy: unseen findings

SecureList

FinSpy, also known as FinFisher or Wingbird , is an infamous surveillance toolset. Kaspersky has been tracking deployments of this spyware since 2011. Both of them are encrypted with RC4. All communications between the server are encrypted with RC4. The encrypted VFS file. Names differ between samples.

article thumbnail

Advanced threat predictions for 2024

SecureList

However, instead of encrypting the data, it purposefully destroyed it in the affected systems. This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. The malware posed as ransomware, demanding money from the victims for “decrypting” their data.

Hacking 119