Security Affairs

DECEMBER 8, 2022

Web Explorer – Fast Internet is a browsing app with over five million downloads on the Google Play store. SecurityAffairs – hacking, Android app). The post <strong>Android app with over 5m downloads leaked user browsing history</strong> appeared first on Security Affairs. De-anonymize users.

Internet 108

Internet Internet Mobile Authentication 108

Krebs on Security

JULY 18, 2023

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] LeakedSource also tried to pass itself off as a legal, legitimate business that was marketing to security firms and professionals. In 2019, a Canadian company called Defiant Tech Inc.

Hacking 200

Hacking Accountability Data breaches Marketing 200

Security Affairs

APRIL 17, 2022

GitHub uncovered threat actors using stolen OAuth user tokens to gain access to their repositories and download private data from several organizations. Threat actors abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including npm.

Hacking 101

Hacking Accountability Cybersecurity Authentication 101

SecureList

AUGUST 14, 2023

Another tactic, popular with scammers big and small, phishers included, is hacking websites and placing malicious content on those, rather than registering new domains. Besides tucking a phishing page inside the website they hack, scammers can steal all of the data on the server and completely disrupt the site’s operation.

Phishing 79

Phishing Hacking Banking Scams 79

Security Affairs

MAY 5, 2023

Fleckpe is a new Android subscription Trojan that was discovered in the Google Play Store, totaling more than 620,000 downloads since 2022. Fleckpe is a new Android subscription Trojan that spreads via Google Play, the malware discovered by Kaspersky is hidden in photo editing apps, smartphone wallpaper packs, and other general-purpose apps.

Malware 77

Malware Mobile Antivirus Hacking 77

Security Affairs

JANUARY 4, 2021

Security expert spotted a new piece of malware that leverages weaponized Word documents to download a PowerShell script from GitHub. Security expert discovered a new piece of malware uses weaponized Word documents to download a PowerShell script from GitHub. SecurityAffairs – hacking, PowerShell).

Antivirus 115

Antivirus Malware Accountability Hacking 115

Security Affairs

FEBRUARY 5, 2024

” Pen Test Partners researchers were able to exploit the issue to view the data being downloaded from the NAVBLUE Servers. Most of the files downloaded by the researchers were SQLite databases containing information on specific aircraft, and many of them included take-off performance data (PERF).

Hacking 91

Hacking Engineering Encryption Software 91

Security Affairs

OCTOBER 23, 2021

CISA warned of crypto-mining malware hidden in a popular JavaScript NPM library, named UAParser.js, which has millions of weekly downloads. Cybersecurity and Infrastructure Security Agency published an advisory to warn of the discovery of a crypto-mining malware in the popular NPM Package UAParser.js. Pierluigi Paganini.

Malware 132

Malware Cryptocurrency Accountability Software 132

Security Affairs

JUNE 1, 2023

Researchers discovered spyware, dubbed SpinOk, hidden in 101 Android apps with over 400 million downloads in Google Play. Upon executing the module, the malware-laced SDK connects to the C2 sending back a large amount of system information about the infected device. The full list of apps is available here.

Spyware 85

Spyware Advertising Malware Marketing 85

Security Affairs

JULY 19, 2020

The social media giant Twitter confirmed that hackers compromised 130 accounts in last week hack and downloaded data from eight of them. The social media platform Twitter suffered one of the biggest cyberattacks in its history, multiple high-profile accounts were hacked. SecurityAffairs – hacking, social engineering).

Accountability 99

Accountability Social Engineering Media Hacking 99

Security Affairs

NOVEMBER 21, 2019

ESET researchers discovered a new downloader, dubbed DePriMon, that used new “Port Monitor” methods in attacks in the wild. . The new DePriMon downloader was used by the Lambert APT group, aka Longhorn, to deploy malware. The registered DLL will be loaded at system startup by the spoolsv.exe with SYSTEM privileges.

Malware 102

Malware Telecommunications Advertising Encryption 102

Security Affairs

MARCH 30, 2021

Palo Alto Network researcher Aviv Sasson discovered 30 malicious Docker images, which were downloaded 20 million times, that were involved in cryptojacking operations. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, Docker). Pierluigi Paganini.

Cryptocurrency 100

Cryptocurrency Accountability Architecture Software 100

Security Affairs

SEPTEMBER 25, 2023

we have also released a security patch plugin so that you can still patch your environment. The security patch plugin can be downloaded using one of the links below and installed on TeamCity 8.0+. ” The link for the Security patch plugin are for TeamCity 2018.2 For TeamCity 2019.2 to 2023.05.3 | for TeamCity 8.0

Hacking 114

Hacking Software Authentication Internet 114

Security Affairs

JULY 31, 2022

Threat actors that go online with the moniker Adrastea claim to have hacked the multinational manufacturer of missiles MBDA. A threat actor that goes online with the moniker Adrastea , and that defines itself as a group of independent cybersecurity specialists and researchers, claims to have hacked MBDA. “Hello!

Manufacturing 113

Manufacturing Hacking Passwords Cybersecurity 113

Security Affairs

JANUARY 18, 2021

The attack took place on Saturday, around 04:00 (GMT), when threat actors compromised an administrator account and downloaded a copy of the list of users. “The intruder was able to download a copy of the user list that contains email addresses, handles, and other statistical information about the users of the forum. .”

Hacking 127

Hacking Data breaches Passwords Accountability 127

Security Affairs

DECEMBER 4, 2021

The Hancitor downloader has been active since at least 2016 for dropping Pony and Vawtrak. As a loader, it has been used to download other malware families, such as Ficker stealer and NetSupport RAT , to compromised hosts. SecurityAffairs – hacking, ransomware). The alert includes indicators of compromise and mitigations.

Ransomware 135

Ransomware Hacking Malware Encryption 135

Security Affairs

SEPTEMBER 12, 2023

” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Repojacking attack ) The post A new Repojacking attack exposed over 4,000 GitHub repositories to hack appeared first on Security Affairs.

Hacking 112

Hacking Risk Accountability Information Security 112

Security Affairs

JULY 14, 2020

Adobe has addressed over a dozen flaws in its Creative Cloud, Media Encoder, Genuine Service, ColdFusion and Download Manager products. Adobe has addressed over a dozen vulnerabilities in its Creative Cloud, Media Encoder, Genuine Service, ColdFusion, and Download Manager products. SecurityAffairs – hacking, Adobe).

Media 66

Media Advertising Hacking Information Security 66

Security Boulevard

MARCH 27, 2022

The LAPSUS$ hacking group has claimed to have hacked both Microsoft and Okta, details about a novel phishing technique called a browser-in-the-browser (BitB) attack, and how a popular software package that has 1.1

Phishing 98

Phishing Software Hacking Social Engineering 98

Security Affairs

SEPTEMBER 29, 2019

Researchers at Proofpoint have spotted a piece of downloader , dubbed WhiteShadow, that leverages Microsoft SQL queries to pull and deliver malicious payloads. . In August, malware researchers at Proofpoint spotted a new downloader which is being used to deliver a variety of malware via Microsoft SQL queries. Pierluigi Paganini.

Malware 81

Malware Advertising Phishing Information Security 81

Security Affairs

AUGUST 23, 2022

“This permits an attacker to gain full control of device with an unrestricted root shell, which is far more access than even the owner of the device has as they are restricted to a limited “protected shell” (psh) which filters input to a predefined set of limited, mostly informational commands.”. SecurityAffairs – hacking, Hikvision).

Hacking 112

Hacking Firmware Internet Internet 112

Security Affairs

SEPTEMBER 23, 2022

The popular collective Anonymous claims to have hacked the website of the Russian Ministry of Defense and leaked data of 305,925 people. The #OpRussia ( #OpRussia ) launched by Anonymous on Russia after the criminal invasion of Ukraine continues, the popular collective claims to have hacked the website of the Russian Ministry of Defense.

Hacking 81

Hacking Mobile Information Security 81

Security Affairs

MAY 30, 2024

“The BBC’s information security team has alerted us to a data security incident, in which some files containing personal information of some BBC Pension Scheme members were copied from a cloud-based storage service. The BBC disclosed a data breach that occurred on May 21.

Data breaches 77

Data breaches Insurance Information Security Hacking 77

Security Affairs

MAY 11, 2023

Industrial and IoT cybersecurity firm Claroty disclosed technical details of five vulnerabilities that be exploited to hack some Netgear router models. “Team82 disclosed five vulnerabilities in NETGEAR’s Nighthawk RAX30 routers as part of its research and participation in last December’s Pwn2Own Toronto hacking competition.”

Hacking 94

Hacking Firmware Authentication DNS 94

Security Affairs

MAY 26, 2024

SmokeLoader acts as a loader for other malware, once it is executed it will inject malicious code into the currently running explorer process (explorer.exe) and downloads another payload to the system. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Ukraine)

Malware 101

Malware Banking Accountability Phishing 101

Security Affairs

APRIL 20, 2024

CrushFTP has notified users of a virtual file system escape vulnerability impacting their FTP software, which could potentially enable users to download system files. have a vulnerability where users can escape their VFS and download system files. “CrushFTP v11 versions below 11.1 This has been patched in v11.1.0.

Software 106

Software Hacking Information Security 106

Security Affairs

MAY 1, 2023

Russian APT group Nomadic Octopus hacked a Tajikistani carrier to spy on government officials and public service infrastructures. The group mainly employed public offensive tools, the operators run commands and download their tools on victim systems inattentively, for example during the victim’s active hours.

Hacking 75

Hacking Telecommunications Government Firewall 75

Security Affairs

MARCH 7, 2024

export=download&id=1uRaMFq3jVR3yhcdRbBvuGdq-jLBLKtTH drops /kholapqua.com/Document.zip [link] pic.twitter.com/Y9CpY8xyLU — idclickthat (@idclickthat) August 17, 2023 Threat actors sent Facebook messenger direct messages to the victims attempting to trick them into downloading archive files such as RAR or ZIP files.

Malware 128

Malware Hacking Accountability Cybersecurity 128

Security Affairs

SEPTEMBER 15, 2021

Anonymous claims to have hacked the controversial web hosting provider Epik, known for allowing far-right, neo-Nazi, and other extremist content. “Due to its size, it’s incompatible with most torrent clients and many users will have difficulty downloading the data. SecurityAffairs – hacking, Anonymous).

Hacking 107

Hacking Data breaches DNS Media 107

Security Affairs

MARCH 4, 2021

FireEye researchers spotted a new sophisticated second-stage backdoor that was likely linked to threat actors behind the SolarWinds hack. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, SolarWinds). Follow me on Twitter: @securityaffairs and Facebook.

Malware 113

Malware Hacking Antivirus Information Security 113

Security Affairs

SEPTEMBER 4, 2021

The complete source code for the Babuk ransomware is available for sale on a Russian-speaking hacking forum. A threat actor has leaked the source code for the Babuk ransomware on a Russian-speaking hacking forum. You can download the Babuk source here: vx-underground[.]org/tmp/ SecurityAffairs – hacking, RaaS).

Hacking 96

Hacking Ransomware Encryption Cybercrime 96

Security Affairs

MAY 12, 2022

Researchers uncovered a massive hacking campaign that compromised thousands of WordPress websites to redirect visitors to scam sites. phishing pages, malware downloads), scam pages, or commercial websites to generate illegitimate traffic. SecurityAffairs – hacking, WordPress websites). To nominate, please visit:?

Hacking 88

Hacking Scams Phishing Cybersecurity 88

Security Affairs

MAY 17, 2019

A recently patched flaw in the Slack desktop application for Windows can be exploited by attackers to steal and manipulate a targeted user’s downloaded files. Slack is a cloud-based set of proprietary team collaboration tools and services, Security researcher David Wells from Tenable discovered a critical flaw in version 3.3.7

Advertising 77

Advertising Authentication Hacking Malware 77

Security Affairs

APRIL 14, 2020

The details of around four million users are now being shared for free on underground hacking forums, according to ZDNet that has obtained samples from different sources, exposed records include usernames, email addresses, and hashed account passwords (bcrypt hashing algorithm). ” reads the post published Risk Based Security.

Accountability 137

Accountability Hacking Data breaches Passwords 137

Security Affairs

MARCH 14, 2022

Anonymous claims to have hacked the systems of the German subsidiary of Russian energy giant Rosneft and stole 20TB of data. The Anonymous hacker collective claimed to have hacked the German branch of the Russian energy giant Rosneft. “But unfortunately the download was stopped in between. ” reported the WELT.

Hacking 93

Hacking DDOS Internet Internet 93

Security Affairs

JANUARY 31, 2022

The expert pointed out that an attacker could exploit this attack chain to turn the user’s camera, and also to hack their iCloud, PayPal, Facebook, Gmail, and other accounts. “My hack successfully gained unauthorized camera access by exploiting a series of issues with iCloud Sharing and Safari 15. accounts too.”

Hacking 82

Hacking Accountability Mobile Malware 82

Security Affairs

AUGUST 21, 2020

During the ordinary monitoring of Deepweb and Darkweb , researchers at Cyble came across the leak disclosure post published by the Maze ransomware operators that claim the hack of the Hoa Sen Group. SecurityAffairs – hacking, Maze Ransomware Operators). Hoa Sen Group is the no.1 Pierluigi Paganini.

Ransomware 126

Ransomware Hacking Advertising Backups 126