Heimadal Security

APRIL 19, 2022

Citizen Lab researchers have discovered two independent Pegasus malware campaigns, that targeted the prime minister’s office and other official UK government networks as well as the Catalan presidents and members of civil society organizations. What Happened?

Spyware 120

Spyware Government Malware Cybersecurity 120

Heimadal Security

JANUARY 16, 2023

However, corrupted VPN installers have been used by threat actors to deliver a piece of spyware called EyeSpy, as part of a malware campaign that started in May 2022. The post Malicious VPN Installers Used to Infect Devices with Spyware appeared first on Heimdal Security Blog.

Spyware 78

Spyware VPN Marketing Technology 78

Security Boulevard

JUNE 22, 2022

It could be via virus malware, phishing, social engineering, fileless malware, etc. So, we’re here to talk about one such common tactic: Spyware. What is spyware and how does it work? The post What is Spyware and How to Protect Against it? The post What is Spyware and How to Protect Against it?

Spyware 97

Spyware Social Engineering Engineering Phishing 97

Security Affairs

APRIL 17, 2023

The Israeli surveillance firm QuaDream is allegedly shutting down its operations after Citizen Lab and Microsoft uncovered their spyware. Last week Citizen Lab researchers reported that at least five civil society members were victims of spyware and exploits developed by the Israeli surveillance firm QuaDream. and 14.4.2,

Surveillance 83

Surveillance Spyware Education Media 83

Heimadal Security

NOVEMBER 14, 2022

A spyware tool known as BadBazaar, has been discovered targeting ethnic and religious minorities in China, mainly the Uyghurs in Xinjiang. The new Android spyware was originally discovered by MalwareHunterTeam and linked to Bahamut, a threat actor primarily active in the Middle East.

Malware 90

Malware Spyware Cybersecurity 90

Heimadal Security

DECEMBER 6, 2021

Embassy and State Department staff members that their iPhones may have been targeted by an unknown attacker employing state-sponsored spyware Pegasus. The malware is developed by the Israeli tech firm NSO Group Technologies. Over the last few months, the NSO Group proprietary spyware Pegasus, […].

Spyware 95

Spyware Technology Malware Cybersecurity 95

The State of Security

JULY 20, 2022

Three million Android users may have lost money and had their devices infected by spyware, after the discovery that the official Google Play store has been distributing apps infected by a new family of malware. Read more in my article on the Tripwire State of Security blog.

Spyware 103

Spyware Malware 103

Security Affairs

MAY 1, 2023

Iranian authorities have been spotted using the BouldSpy Android malware to spy on minorities and traffickers. Researchers at the Lookout Threat Lab have discovered a new Android surveillance spyware, dubbed BouldSpy, that was used by the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). continues the report.

Surveillance 77

Surveillance Malware Spyware Education 77

Heimadal Security

SEPTEMBER 29, 2021

The FinFisher surveillance solution was developed by the Gamma Group but it also comes with malware-like capabilities often found in spyware strains. The post Windows Boot Manager Hijacked by FinFisher Malware appeared first on Heimdal Security Blog. Researchers Investigated […].

Malware 121

Malware Spyware Surveillance Government 121

Hackology

NOVEMBER 11, 2023

The emergence of Kamran spyware, targeting users of a regional news website, has raised concerns among cybersecurity experts. Distributed through a possible watering-hole attack on the Hunza News website , the spyware prompts users to grant permissions, allowing access to sensitive data.

Spyware 45

Spyware Malware Risk Mobile 45

Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Spyware 77

Spyware Surveillance Telecommunications Mobile 77

Heimadal Security

JANUARY 14, 2022

Windows Defender is a Microsoft Windows anti-malware component. It was initially made available as a free anti-spyware download for Windows XP, and it was later included with Windows Vista and Windows 7. The post A Weakness Found in Microsoft Defender Allows Hackers to Avoid Malware Detection appeared first on Heimdal Security Blog.

Malware 130

Malware Spyware Antivirus Cybersecurity 130

Security Affairs

DECEMBER 21, 2023

Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882, to spread the Agent Tesla malware. Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882 (CVSS score: 7.8), as part of phishing campaigns to spread the Agent Tesla malware.

Malware 94

Malware Phishing Spyware Cyber threats 94

Security Affairs

APRIL 1, 2023

CISA has added nine flaws to its Known Exploited Vulnerabilities catalog, including bugs exploited by commercial spyware on mobile devices. The exploits were used to install commercial spyware and malicious apps on targets’ devices. The experts pointed out that both campaigns were limited and highly targeted.

Spyware 79

Spyware Surveillance Mobile Education 79

Heimadal Security

DECEMBER 14, 2021

Agent Tesla initially detected in late 2014, is a known spyware aimed at collecting sensitive data from a victim’s device, such as stored application credentials and keyboard inputs (keylogger). The post Agent Tesla Spyware Used in Phishing Campaign appeared first on Heimdal Security Blog.

Spyware 69

Spyware Phishing Internet Internet 69

Security Affairs

JUNE 2, 2022

An international law enforcement operation involving 11 countries resulted in the takedown of the FluBot Android malware. An international law enforcement operation involving 11 countries led to the takedown of the infamous FluBot Android malware. SecurityAffairs – hacking, Android malware). Pierluigi Paganini.

Spyware 86

Spyware Malware Banking Cybercrime 86

Security Affairs

APRIL 19, 2022

Researchers from Citizen Lab have published a report detailing the use of a new zero-click iMessage exploit, dubbed HOMAGE, to install the NSO Group Pegasus spyware on iPhones belonging to Catalan politicians, journalists, academics, and activists. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook.

Spyware 91

Spyware Surveillance Government Software 91

Security Affairs

MARCH 29, 2023

Google’s Threat Analysis Group (TAG) discovered several exploit chains targeting Android, iOS, and Chrome to install commercial spyware. The exploit chains were used to install commercial spyware and malicious apps on targets’ devices. This was recently highlighted by blog posts from Project Zero and Github Security Lab.”

Spyware 85

Spyware Surveillance Firmware Internet 85

Security Boulevard

MARCH 3, 2021

Continue reading Trojan Spyware and BEC Attacks at Sucuri Blog. The post Trojan Spyware and BEC Attacks appeared first on Security Boulevard.

Spyware 75

Spyware Social Engineering Phishing Engineering 75

Heimadal Security

AUGUST 1, 2023

A fake Android app called ‘SafeChat’ is used by malicious actors to infect devices with spyware malware that allows them to steal call logs, text messages, and GPS locations from phones.

Spyware 91

Spyware Malware Cybersecurity 91

SecureList

JANUARY 16, 2024

Introduction In the ever-evolving landscape of mobile security, hunting for malware in the iOS ecosystem is akin to navigating a labyrinth with invisible walls. Imagine having a digital compass that not only guides you through this maze, but also reveals the hidden mechanisms of iOS malware previously shrouded in mystery.

Malware 122

Malware Mobile Backups Spyware 122

SecureList

OCTOBER 5, 2022

We are often asked how targets are infected with malware. Last month, we focused on infection methods used in various malware campaigns: methods that we do not see used very often. In this blog post, we provide excerpts from these reports. It used cracked games and software as bait to trick users into installing malware.

Malware 127

Malware Architecture Spyware Ransomware 127

Malwarebytes

APRIL 1, 2021

A newly discovered piece of Android malware shares the same capabilities found within many modern stalkerware-type apps—it can swipe images and video, rifle through online searches, record phone calls and video, and peer into GPS location data—but the infrastructure behind the malware obscures its developer’s primary motivations.

Malware 145

Malware Spyware Advertising Surveillance 145

The State of Security

JULY 7, 2022

Read more in my article on the Tripwire State of Security blog. Apple has previewed a new feature which aims to harden high-risk users from the serious threat of being spied upon by enemy states and intelligence agencies.

Spyware 123

Spyware Risk Malware 123

Security Affairs

MAY 18, 2022

Researchers spotted a new variant of the UpdateAgent macOS malware dropper that was employed in attacks in the wild. Researchers from the Jamf Threat Labs team have uncovered a new variant of the UpdateAgent macOS malware dropper. Upon executing the malware, it connects to a remote server and retrieves a bash script to be executed.

Adware 78

Adware Malware Spyware Hacking 78

CSO Magazine

MARCH 24, 2022

A new email campaign designed to spread the Vidar spyware package uses a novel technique involving Microsoft Compiled HTML help files, according to a blog post released today by Trustwave. The help files, which use the suffix “CHM,” are packaged in an ISO along with the Vidar payload in what appears to be a Word document.

Spyware 106

Spyware Malware 106

Adam Levin

NOVEMBER 26, 2019

“Our team was able to access this server because it was completely unsecured and unencrypted,” announced VPN review website vpnMentor in a blog article describing their findings. . The contents of the database could also help hackers and cybercriminals target the same companies in other ways.

B2B 295

B2B Spyware VPN Phishing 295

CyberSecurity Insiders

MARCH 24, 2021

Stories from the SOC is a blog series that describes recent real-world security incident investigations conducted and reported by the AT&T SOC analyst team for AT&T Managed Threat Detection and Response customers. The post Stories from the SOC – Propagating malware appeared first on Cybersecurity Insiders. Executive Summary.

Malware 52

Malware Adware Threat Detection Spyware 52

Hot for Security

FEBRUARY 5, 2021

A fake version of the WhatsApp messaging app is suspected of being created by an Italian spyware company to snoop upon individuals and steal sensitive data. Read more in my article on the Hot for Security blog.

Spyware 145

Spyware Malware 145

Heimadal Security

NOVEMBER 15, 2021

GravityRAT is a spyware-type of malware that enables threat actors to steal data from compromised machines. The malware’s developers target users of Windows, Mac OS X, and Android. The post GravityRAT Distributed by Bogus End-to-end Encrypted App appeared first on Heimdal Security Blog. The trojan has […].

Encryption 85

Encryption Spyware Malware Cybersecurity 85

Security Affairs

MAY 17, 2022

Experts spotted over 200 Android apps on the Play Store distributing spyware called Facestealer used to steal sensitive data. Trend Micro researchers spotted over 200 Android apps on the Play Store distributing spyware called Facestealer used to steal sensitive data from infected devices. SecurityAffairs – malware, Facestealer).

Spyware 89

Spyware Cryptocurrency VPN Malware 89

Security Affairs

APRIL 23, 2023

Abandoned Eval PHP WordPress plugin abused to backdoor websites CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog At least 2 critical infrastructure orgs breached by North Korea-linked hackers behind 3CX attack American Bar Association (ABA) suffered a data breach,1.4

Spyware 72

Spyware Ransomware Malware Data breaches 72

ZoneAlarm

SEPTEMBER 12, 2023

These mods, eerily similar to the original and laden with spyware capabilities, pose a substantial threat to individual and business users alike. Telegram, an encrypted messaging application, allows and encourages the development … The post The Hidden Dangers of Telegram Mods on Google Play appeared first on ZoneAlarm Security Blog.

Spyware 74

Spyware Encryption Data privacy Malware 74

Security Boulevard

FEBRUARY 10, 2022

Malware, or code written for malicious purposes, is evolving. To understand the new dangers malicious code poses to developers, it helps to take a brief look back at the history of malware. Malicious code, or malware, is intentionally written to disrupt, damage, or otherwise inflict undesirable effects on a target system.

Malware 96

Malware Software Ransomware Adware 96

The Last Watchdog

MAY 8, 2019

And earlier this year, three popular “ selfie beauty apps ”– Pro Selfie Beauty Camera, Selfie Beauty Camera Pro and Pretty Beauty Camera 2019 – accessible in Google Play Store were revealed to actually be tools to spread adware and spyware. Adware are unwanted ads that redirect you to sketchy webpages, and spyware collects your data.

Adware 176

Adware Spyware Mobile Banking 176

Security Affairs

APRIL 13, 2022

One of the officials targeted with the infamous spyware there is Didier Reynders, a senior Belgian statesman who has served as the European Justice Commissioner since 2019. The Pegasus spyware used the ForcedEntry zero-day exploit to compromise the recipients’ devices without their interaction. ” concludes the report.

Surveillance 92

Surveillance Software Spyware Hacking 92

Security Affairs

MAY 26, 2022

Researchers warn of a new malvertising campaign spreading the ChromeLoader malware that hijacks the victims’ browsers. Researchers from Red Canary observed a new malvertising campaign spreading the ChromeLoader malware that hijacks the victims’ browsers. ” reads the analysis published by the experts.

Malware 114

Malware Spyware Threat Detection Engineering 114