Malwarebytes

FEBRUARY 13, 2024

In 2022, tech publication TechCrunch discovered that TheTruthSpy and other spyware apps share a common Insecure Direct Object Reference (IDOR) vulnerability, CVE-2022-0732. The publications described the bug as “extremely easy to exploit, and grants unfettered remote access to all of the data collected from a victim’s Android device.”

Spyware 142

Spyware Malware Data collection Hacking 142

Security Affairs

JULY 21, 2019

Experts spotted a rare Linux Desktop spyware dubbed EvilGnome. Israel surveillance firm NSO group can mine data from major social media. Poland and Lithuania fear that data collected via FaceApp could be misused. Scraping the TOR for rare contents. The Problem With the Small Business Cybersecurity Assistance Act.

Small Business 89

Small Business Media Spyware Advertising 89

Security Affairs

MARCH 14, 2019

We dubbed this JS Sniffer family GMO because the malware uses gmo[.]li 1 The screenshot shows a one-line code (line # 771) that downloads a JS Sniffer designed to steal customers’ data once a user lands on a checkout page. JS Sniffers is a type of malware that remains poorly researched. li host.”.

eCommerce 110

eCommerce Marketing Data breaches Advertising 110

Malwarebytes

FEBRUARY 6, 2023

Data collected by the Internet Storm Center dug into “Survival Time History”, which is “calculated as the average time between reports for an average target IP address. The pop up blocker in particular was a big help with the proliferation of adware and spyware plugging into advertising networks.

Internet 93

Internet Internet Adware Spyware 93

SecureList

JULY 27, 2023

The most remarkable findings Early in June, we issued an early warning of a long-standing campaign that we track under the name Operation Triangulation , involving a previously unknown iOS malware platform distributed via zero-click iMessage exploits. Kaspersky employees were also affected by this threat.

Malware 98

Malware Government Phishing Social Engineering 98

SecureList

NOVEMBER 14, 2023

The rise of destructive attacks In December of last year, shortly after we released our predictions for 2023, Russian government agencies were reported to have been targeted by a data wiper called CryWiper. The malware posed as ransomware, demanding money from the victims for “decrypting” their data.

Hacking 140

Hacking Energy and Utilities Malware Media 140

SecureList

MARCH 13, 2024

Not unlike malware, stalkerware apps are much less frequent on iPhones than on Android devices due to the proprietary and closed nature of iOS. To calculate the statistics, data from the consumer line of Kaspersky’s mobile security solutions was reviewed according to the Coalition Against Stalkerware detection criteria.

Mobile 107

Mobile Passwords Surveillance Technology 107

SecureList

SEPTEMBER 28, 2021

Kaspersky has been tracking deployments of this spyware since 2011. The Pre-Validator ensures that the victim machine is not used for malware analysis. Each shellcode collects specific system information (e.g. It is important to highlight that the shellcodes only collect the data, all the checks are performed server-side.

Encryption 145

Encryption Malware Spyware Architecture 145

SecureList

FEBRUARY 16, 2023

Both can be used to steal user data, collect information about the corporate network, and spread additional malware, such as ransomware. Noon spyware (4.89%) moved up to second place, and Badun Trojans (4.61%) spreading as archived electronic documents moved down to third place.

Phishing 116

Phishing Scams Accountability Energy and Utilities 116

Security Affairs

MARCH 2, 2025

Soldier Charged in AT&T Hack Searched Can Hacking Be Treason Group-IB contributes to joint operation of Royal Thai Police and Singapore Police Force leading to arrest of cybercriminal behind more than 90 data leaks worldwide UAC-0173 against the Notary Office of Ukraine (CERT-UA#13738) North Korea Responsible for $1.5

Cybercrime 62

Cybercrime Hacking Ransomware Cryptocurrency 62

Security Affairs

FEBRUARY 2, 2025

Cisco warns of a ClamAV bug with PoC exploit International Press Newsletter Cybercrime UnitedHealth Estimates Change Healthcare Hack Impacted About 190 Million People TalkTalk investigating data breach after hacker claims theft of customer data Law enforcement takes down two largest cybercrime forums in the world New York Blood Center Enterprises (..)

Data breaches 67

Data breaches Cybercrime Healthcare Ransomware 67