Security Affairs

FEBRUARY 2, 2025

WhatsApp linked the hacking campaign to Paragon, an Israeli commercial surveillance vendor acquired by AE Industrial Partners for $900 million in December 2024. The WIS, among other things, allows defendants clients to send cipher files with installation vectors that ultimately allow the clients to surveil target users.

Spyware 110

Spyware Hacking Surveillance Malware 110

Security Affairs

DECEMBER 1, 2021

Which are the most secure encrypted messaging apps? An FBI document shows what data can be obtained from them. The Record shared an FBI training document that reveals the surveillance capabilities of the US law enforcement detailing which data can be extracted from encrypted messaging apps. ” reads the document.

Encryption 145

Encryption Surveillance Hacking Information Security 145

Security Affairs

APRIL 8, 2020

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. According to the NSO CEO, Facebook was interested in improving surveillance capabilities on iOS devices of the Onavo Protect. ” reported Motherboard, the media outlet that disclosed the story.

Surveillance 136

Surveillance Spyware Government Advertising 136

Security Affairs

MARCH 20, 2025

The modular architecture of the malware allows to extend its functionalities for multiple malicious purposes, including surveillance, reconnaissance, information theft, DDoS attacks, and arbitrary code execution.

Computers and Electronics 109

Computers and Electronics Telecommunications Malware Surveillance 109

Security Affairs

FEBRUARY 8, 2021

Iran-linked APT group Domestic Kitten, also tracked as APT-C-50, has been conducting widespread surveillance targeting over 1,000 individuals. Both groups have conducted long-running cyber-attacks and intrusive surveillance campaigns, which target both individuals’ mobile devices and personal computers.”

Surveillance 116

Surveillance Mobile Malware Cyber Attacks 116

Security Affairs

FEBRUARY 26, 2025

LightSpy can steal files from multiple popular applications like Telegram, QQ, and WeChat, as well as personal documents and media stored on the device. ” LightSpy now targets social media platforms like Facebook and Instagram from Android, extracting messages, contacts, and metadata, enhancing surveillance and exploitation potential.

Data collection 106

Data collection Spyware Media Surveillance 106

Security Affairs

AUGUST 4, 2019

The US government is testing high-altitude balloons manufactured by Sierra Nevada to conduct surveillance over American soil. The US government is planning to use high-altitude balloons to conduct surveillance over Americans. SecurityAffairs – high-altitude balloons, surveillance). ” states The Guardian.

Surveillance 107

Surveillance Manufacturing Advertising Government 107

Security Affairs

SEPTEMBER 16, 2024

The IT giant fears that the disclosures of its threat intelligence related to commercial spyware operations could aid NSO and other surveillance firms. “Apple’s teams work tirelessly to protect the critical threat-intelligence information that Apple uses to protect its users worldwide. ” reads the court filing.

Surveillance 121

Surveillance Spyware Risk Hacking 121

Security Affairs

FEBRUARY 7, 2023

The collective Anonymous released last week 128 gigabytes of documents that were allegedly stolen from the Russian Internet Service Provider Convex. The stolen documents contain evidence of a dragnet surveillance activity conducted by the intelligence service FSB. ” reads a statement sent by Caxxii to the Kyiv Post.”

Surveillance 98

Surveillance Internet Internet Government 98

Krebs on Security

OCTOBER 28, 2020

In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. What’s more, Syrén seemed to downplay the severity of the exposure.

Hacking 358

Hacking Ransomware Banking Accountability 358

Security Affairs

FEBRUARY 6, 2022

One of the Apple iOS zero-day flaws exploited by the NSO group was also used by another surveillance firm named QuaDream. One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream.

Surveillance 98

Surveillance Spyware Government Hacking 98

Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Spyware 106

Spyware Surveillance Telecommunications Mobile 106

Security Affairs

MAY 1, 2023

Researchers at the Lookout Threat Lab have discovered a new Android surveillance spyware, dubbed BouldSpy, that was used by the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). The researchers are tracking the spyware since March 2020, starting in 2023, multiple security experts [ 1 , 2 ] started monitoring its activity. .”

Surveillance 98

Surveillance Malware Spyware Accountability 98

Security Affairs

MARCH 13, 2025

North Korea-linked threat actor ScarCruft (aka APT37 , Reaper, and Group123) is behind a previously undetected Android surveillance tool namedKoSpythat was used to target Korean and English-speaking users. Kaspersky first documented the operations of the group in 2016.

Spyware 80

Spyware Surveillance Encryption Malware 80

Centraleyes

JUNE 16, 2025

ISO 27001 is the international standard for Information Security Management Systems (ISMS). Achieving ISO 27001 certification demonstrates that your organization is committed to protecting sensitive data and managing risks related to information security.

Risk 52

Risk Information Security Surveillance 52

Security Affairs

SEPTEMBER 20, 2024

German law enforcement agencies have been surveilling Tor network by operating their own servers for months. Research conducted by ARD’s Panorama and STRG_F revealed that data collected during surveillance is processed using statistical methods, effectively breaking Tor’s anonymity. ” reported the NDR.

Surveillance 142

Surveillance Data collection Media Hacking 142

Security Affairs

MARCH 1, 2020

Attacks against undersea cables are not a novelty, in 2014 The Register published information on a secret British spy base located at Seeb on the northern coast of Oman, a strategic position that allows the British Government to tap to various undersea cables passing through the Strait of Hormuz into the Persian/Arabian Gulf.

Wireless 145

Wireless Surveillance Telecommunications Advertising 145

Security Affairs

MAY 23, 2022

We assess the exploits were packaged by a single commercial surveillance company, Cytrox, and sold to different govt-backed actors. The attacks aimed at installing the surveillance spyware Predator, developed by the North Macedonian firm Cytrox. link] — Shane Huntley (@ShaneHuntley) May 19, 2022. ” continues the report.

Spyware 145

Spyware Surveillance Government Banking 145

Security Affairs

OCTOBER 30, 2019

WhatsApp sued Israeli surveillance firm NSO Group, accusing it of using a flaw in its messaging service to conduct cyberespionage on journalists and activists. WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. The lawsuit filed by WhatsApp in U.S.

Surveillance 75

Surveillance Technology Spyware Mobile 75

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. Amnesty International has not documented human rights violations by NilePhish directly linked to FinFisher products.” ” reads the Amnesty’s report.

Spyware 145

Spyware Surveillance Mobile Advertising 145

Security Affairs

APRIL 25, 2020

The legal dispute between Facebook and NSO group continues even after the Israeli surveillance firm filed a motion to dismiss the case earlier this month. Now both companies are providing technical details requested by the cyber-security experts. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 133

Spyware Surveillance Advertising Mobile 133

Security Affairs

FEBRUARY 11, 2021

Since 2018, the hackers started targeting mobile users with an Android surveillance malware ChatSpy. “We are confident SunBird and Hornbill are two tools used by the same actor, perhaps for different surveillance purposes.” If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Spyware 144

Spyware Surveillance Malware Mobile 144

Centraleyes

MAY 5, 2025

This guide offers a comprehensive, step-by-step breakdown of the process, providing the depth and clarity youre looking for to build a rock-solid Information Security Management System (ISMS). ISO 27001 is a globally recognized standard for managing information security. What is ISO 27001? Why is ISO 27001 Important?

Risk 59

Risk Information Security Firewall Education 59

Malwarebytes

DECEMBER 21, 2023

The regulator found so many flaws in the retailer’s surveillance program that it concluded Rite Aid had failed to implement reasonable procedures and prevent harm to consumers in its use of facial recognition technology in hundreds of stores. The company also failed to inform consumers that it was using the technology in its stores.

Surveillance 117

Surveillance Technology Retail Artificial Intelligence 117

Security Affairs

MAY 14, 2019

The bad news is that experts are aware of attacks exploiting the WhatsApp zero-day to deliver surveillance software. The Financial Times reported that the WhatsApp zero-day has been exploited by threat actors to deliver the spyware developed by surveillance firm NSO Group.

Spyware 111

Spyware Surveillance Mobile Software 111

Security Affairs

SEPTEMBER 15, 2021

In 2019, the Reuter agencies published a report that detailed the activity of “a secret hacking team of American mercenaries” that joined Project Raven as part of a clandestine team of experts that helped the United Arab Emirates in conducting a surveillance program and conducting hit-and-run hacking operations. organizations.”

Surveillance 143

Surveillance Hacking Government Cybersecurity 143

Security Affairs

OCTOBER 5, 2023

TechCrunch reported that a zero-day exploits for popular applications like WhatsApp “are now worth millions of dollars” TechCrunch obtained leaked documents that demonstrate that, as of 2021, a zero-click, zero-day exploit for the Android version of WhatsApp had a bounty between $1.7 and $8 million.

Mobile 141

Mobile Marketing Spyware Surveillance 141

Security Affairs

NOVEMBER 3, 2021

sanctioned four companies for the development of surveillance malware or the sale of hacking tools used by nation-state actors, including NSO Group. The Commerce Department’s Bureau of Industry and Security (BIS) has sanctioned four companies for the development of spyware or the sale of hacking tools used by nation-state actors.

Technology 138

Technology Government Surveillance Spyware 138

Security Affairs

NOVEMBER 25, 2021

The PowerShortShell stealer is also used for Telegram surveillance and gathering system information from infected systems. Upon opening the document a DLL is dropped on the target system, then it is used to execute the PowerShortShell stealer payload. fn= hxxp://hr.dedyn.io/upload2.aspx reads the post published by Microsoft.

Surveillance 112

Surveillance Social Engineering Ransomware Cybercrime 112

Security Affairs

OCTOBER 11, 2021

Threa actors also used email messages as attack vectors, the malicious messages were sent from a Gmail account (jimajemi096[@]gmail.com with the Togolese name “atwoki logo) and used a weaponized Word document that trigger the CVE-2017-0199 RCE flaw. ” Follow me on Twitter: @securityaffairs and Facebook. .

Spyware 102

Spyware Surveillance Accountability Mobile 102

Security Affairs

APRIL 20, 2022

Below the organizations breached in the last three days, since my previous update: Tendertech is a firm specializing in processing financial and banking documents on behalf of businesses and entrepreneurs. Synesis Surveillance System – Anonymous claims to have hacked the Synesis and Kipod surveillance systems. GB in size.

Hacking 140

Hacking Banking Surveillance Engineering 140

Security Affairs

AUGUST 24, 2021

The iPhones of nine activists, including members of the Bahrain Center for Human Rights , Waad , Al Wefaq , were infected with Pegasus spyware as part of a surveillance operation likely orchestrated by a threat actor tracked as LULU and attributed with high confidence to the government of Bahrain. ” concludes the report.

Spyware 98

Spyware Surveillance Hacking Mobile 98

Security Affairs

JANUARY 29, 2024

National Security Agency (NSA) admitted to buying internet browsing records from data brokers to monitor Americans’ activity online without a court order. released documents that confirmed the National Security Agency (NSA) buys Americans’ internet browsing records without a court order. Senator Ron Wyden, D-Ore.,

Internet 141

Internet Internet Surveillance Government 141

Security Affairs

NOVEMBER 26, 2023

million patients in the U.S.

Data breaches 131

Data breaches Surveillance Ransomware Cryptocurrency 131

Security Affairs

JANUARY 14, 2021

Security experts from ESET uncovered an ongoing surveillance campaign, dubbed Operation Spalax , against Colombian government institutions and private companies. Malware researchers from ESET uncovered an ongoing surveillance campaign, dubbed Operation Spalax , against Colombian entities exclusively.

Malware 141

Malware Surveillance Phishing Government 141

Security Affairs

MARCH 3, 2025

Amnesty International documented the incident. “Amnesty Internationals Security Lab performed a forensic analysis on Vedrans Samsung Galaxy A32 to check if the device was tampered with while Vedran was detained at the police station. He refused, but his phone was taken and later returned switched off at 12:45 AM.

Hacking 69

Hacking Spyware Technology Surveillance 69

Security Affairs

AUGUST 18, 2021

surveillance law to be incompatible with EU privacy rights.” “The documents submitted by the Senate Chancellery on the use of Zoom show that [GDPR] standards are not being adhered to.” Privacy Shield ), finding U.S. ” states Yahoo News. Multiple European DPA agencies are investigating how U.S.-based

Surveillance 145

Surveillance Cybercrime Hacking Government 145