article thumbnail

TheTruthSpy stalkerware, still insecure, still leaking data

Malwarebytes

In 2022, tech publication TechCrunch discovered that TheTruthSpy and other spyware apps share a common Insecure Direct Object Reference (IDOR) vulnerability, CVE-2022-0732. The publications described the bug as “extremely easy to exploit, and grants unfettered remote access to all of the data collected from a victim’s Android device.”

Spyware 127
article thumbnail

Baidu Android apps removed from Play Store because caught collecting user details

Security Affairs

The two apps were discovered by Palo Alto Networks, which identify them, along with other apps leaking data, using a machine learning (ML)-based spyware detection system. The data collection code was found in the Baidu Push SDK, used to show real-time notifications inside both apps.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Ransomware en masse on the wane: top threats inside web-phishing in H1 2020

Security Affairs

Ransomware , the headliner of the previous half-year, walked off stage: only 1 percent of emails analyzed by Group-IB’s Computer Emergency Response Team (CERT-GIB) contained this kind of malware. Ransomware operators have focused on targeted attacks,choosing large victims with a higher payment capacity.

Phishing 103
article thumbnail

On the 20th Safer Internet Day, what was security like back in 2004?

Malwarebytes

Data collected by the Internet Storm Center dug into “Survival Time History”, which is “calculated as the average time between reports for an average target IP address. The pop up blocker in particular was a big help with the proliferation of adware and spyware plugging into advertising networks.

article thumbnail

Payment data of thousands of customers of UK and US online stores could have been compromised

Security Affairs

We dubbed this JS Sniffer family GMO because the malware uses gmo[.]li 1 The screenshot shows a one-line code (line # 771) that downloads a JS Sniffer designed to steal customers’ data once a user lands on a checkout page. JS Sniffers is a type of malware that remains poorly researched. li host.”.

article thumbnail

Spam and phishing in 2022

SecureList

Both can be used to steal user data, collect information about the corporate network, and spread additional malware, such as ransomware. Noon spyware (4.89%) moved up to second place, and Badun Trojans (4.61%) spreading as archived electronic documents moved down to third place.

article thumbnail

The State of Stalkerware in 2023–2024

SecureList

Not unlike malware, stalkerware apps are much less frequent on iPhones than on Android devices due to the proprietary and closed nature of iOS. To calculate the statistics, data from the consumer line of Kaspersky’s mobile security solutions was reviewed according to the Coalition Against Stalkerware detection criteria.

Mobile 78