Security Affairs

APRIL 16, 2024

Researchers warn of a renewed cyber espionage campaign targeting users in South Asia with the Apple iOS spyware LightSpy Blackberry researchers discovered a renewed cyber espionage campaign targeting South Asia with an Apple iOS spyware called LightSpy. 217:52202, which also hosts an administrator panel accessible on port 3458.

Spyware 134

Spyware Mobile Malware Encryption 134

Security Affairs

JUNE 15, 2025

Palo Alto Networks fixed multiple privilege escalation flaws Unusual toolset used in recent Fog Ransomware attack A cyberattack on United Natural Foods caused bread shortages and bare shelves Apple confirmed that Messages app flaw was actively exploited in the wild Trend Micro fixes critical bugs in Apex Central and TMEE PolicyServer Paragon Graphite (..)

Spyware 62

Spyware Data breaches Cybercrime Hacking 62

Malwarebytes

MAY 28, 2024

As you may have read many times before on our blog, some spyware companies have a surprisingly low standard of security. Daigle found that pcTattleTale’s Application Programming Interface (API) allows any attacker to access the most recent screen capture recorded from any device on which the spyware is installed.

Spyware 123

Spyware Software Malware Mobile 123

Security Affairs

APRIL 16, 2019

Scranos is a powerful cross-platform rootkit-enabled spyware discovered while investigating malware posing as legitimate software like video players, drivers and even anti-virus products. “The dropper, which doubles as a password stealer, installs a driver that provides persistence to all other components to be installed in the future.

Spyware 104

Spyware Adware Malware Accountability 104

Security Boulevard

MARCH 24, 2025

Researchers name several countries as potential Paragon spyware customers TechCrunch The Citizen Lab, a group of academics and security researchers, recently published a report indicating the governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore are "likely" customers of Israeli spyware maker Paragon Solutions.

Surveillance 75

Surveillance Telecommunications Data breaches Malware 75

Malwarebytes

APRIL 11, 2024

Mercenary spyware is used by governments to target people like journalists, political activists, and similar targets, and involves the use of sophisticated tools like Pegasus. Pegasus is one of the world’s most advanced and invasive spyware tools, known to utilize zero-day vulnerabilities against mobile devices. Use a password manager.

Spyware 132

Spyware Government Mobile Password Management 132

Security Affairs

JUNE 2, 2022

Known as FluBot, this Android malware has been spreading aggressively through SMS, stealing passwords, online banking details and other sensitive information from infected smartphones across the world.” The victim downloads and opens the malicious app that installs FluBot. FluBot downloads a list of new contacts to target.

Spyware 102

Spyware Malware Banking Cybercrime 102

Malwarebytes

JUNE 29, 2023

In the database file which was later dumped online, the blog said there was: 26,000+ email addresses of the tool's "operators" along with hashes of their passwords. How to prevent spyware and stalkerware-type apps Set a screen lock on your phone and don't let anyone else access it Keep your phone up-to-date.

Spyware 98

Spyware Hacking Antivirus Passwords 98

SecureList

FEBRUARY 5, 2025

The infected apps in Google Play had been downloaded more than 242,000 times. When initialized, it downloads a JSON configuration file from a GitLab URL embedded in the malware body. Images that match the search criteria are downloaded from the device in three steps. Suspicious SDK being called Spark is written in Java.

Malware 142

Malware Encryption Mobile Cryptocurrency 142

Hacker's King

MAY 24, 2025

Credential-based attacks include usernames, passwords, and tokens. The aim here is malicious and weaker than what appears to achieve: make the user reveal intensely guarded secrets, login information, alongside financial details, and in some cases, download harmful software.

Cyber Attacks 59

Cyber Attacks Passwords Education Phishing 59

Security Affairs

JULY 30, 2018

A new sophisticated version of the AZORult Spyware was spotted in the wild, it was involved in a large email campaign on July 18. Malware researchers at Proofpoint spotted a new version of the AZORult Spyware in the wild, it was involved in a large email campaign on July 18, just 24 hours it appeared in cybercrime forums on the Dark Web.

Spyware 72

Spyware Cryptocurrency Passwords Malware 72

IT Security Guru

APRIL 26, 2021

Whether it’s through downloading a rogue attachment or playing a game from an unprotected website, computer viruses are common. Spyware – Without realising it, gamers could be targeted through spyware schemes, especially if they are dealing with an untrustworthy online gaming operation.

Cybersecurity 131

Cybersecurity Spyware VPN Antivirus 131

Security Affairs

JULY 19, 2022

The spyware is able to steal SMS messages, contact lists, and device information and to sign victims up for premium service subscriptions. ThreatLabz researchers announced to have discovered over 50 unique Joker downloader apps on the Play Store till now. The apps have been installed by 100.000+ users, according to the security firm.

Malware 135

Malware Spyware Banking Mobile 135

Hacker's King

JANUARY 8, 2025

Malware and Spyware: These can be described as malicious apps that seem to be legitimate to the other person, resulting in stealing your information, tracking your activity, or directly hacking your Android device. You should always download apps from trusted sources like 'Play Store' for Android users.

Hacking 52

Hacking Spyware Antivirus Passwords 52

Security Affairs

JUNE 21, 2020

The bash shell script opens and runs itself in the Terminal app, then it extracts a self-embedded, password-protected.zip archive file, which contains a traditional Mac.app bundle. The Mac.APP bundle downloads and executers a legitimate, Adobe-signed Flash Player installer, while executes the malicious Mac app in the background.

Engineering 145

Engineering Malware Adware Antivirus 145

Malwarebytes

APRIL 11, 2022

The spyware is offered on download sites pretending to be installers for freeware and cracked versions of paid software. Several campaigns were found to push out this spyware, but all of them were easily connected by the malicious program embedded in the cracked versions of installers, and freeware. Other functionality.

Media 145

Media Malware Spyware Accountability 145

Security Affairs

JANUARY 1, 2024

TWO SPYWARE SENDING DATA OF MORE THAN 1.5M million downloads have been discovered spying on users and sending data to China. DARKBEAM LEAKS BILLIONS OF EMAIL AND PASSWORD COMBINATIONS DarkBeam left an Elasticsearch and Kibana interface unprotected, exposing records from previously reported and non-reported data breaches.

Cybersecurity 135

Cybersecurity Spyware Data breaches Passwords 135

Security Affairs

MARCH 8, 2020

Experts uncovered a new Coronavirus (COVID-19 ) -themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan. ’ The executable employed in this campaign is a strain of the GuLoader malware downloader. The malware can also execute commands from a command and control (C2) server.

Malware 145

Malware Scams Social Engineering Phishing 145

SecureList

SEPTEMBER 26, 2022

These websites are often related to crack, keygen and activators for downloading software illegally, and while they may pretend to be legitimate software, they actually contain a malware dropper. The whole infection chain of NullMixer is as follows: The user visits a website to download cracked software, keygens or activators.

Malware 144

Malware Cryptocurrency Passwords Software 144

Security Affairs

MARCH 11, 2019

Experts observed the STOP ransomware installing the Azorult password-stealing Trojan to steal account credentials, cryptocurrency wallets, and more. The STOP ransomware made the headlines because it is installing password-stealing Trojans on the victims’ machines. ” reads a blog post published by Bleepingcomputer.

Encryption 109

Encryption Ransomware Cryptocurrency Passwords 109

IT Security Guru

AUGUST 9, 2022

Secure your accounts with complex passwords. Are your passwords so strong you struggle to remember them? If not, it might be time you shift to new password and cryptography strategies. . This method works because many people set ordinary and easy-to-remember passwords, often using the same one for multiple accounts.

Data breaches 117

Data breaches Passwords Accountability Antivirus 117

Malwarebytes

JUNE 17, 2024

Basically, it would be a goldmine that spyware and information stealers could easily access and search. It will not hide information such as passwords or financial account numbers. That data may be in snapshots that are stored on your device, especially when sites do not follow standard internet protocols like cloaking password entry.”

Artificial Intelligence 128

Artificial Intelligence Spyware Passwords Internet 128

Malwarebytes

OCTOBER 1, 2024

It’s much easier than having to authenticate using a remote and typing a username and password. Keep threats off your devices by downloading Malwarebytes today. A common way to activate digital subscriptions such as Netflix, Prime or Disney+ on a new TV is to visit a website and enter the code seen on your screen.

Scams 122

Scams Spyware Banking Engineering 122

Security Affairs

OCTOBER 5, 2022

Users in China often attempt to download the Tor browser from third-party websites. The experts also discovered that the libraries bundled with the malicious Tor Browser is infected with spyware. The spyware also provides the functionality to execute shell commands on the victim machine, giving the attacker control over it.”

Spyware 100

Spyware Accountability Software Hacking 100

Security Boulevard

DECEMBER 30, 2021

As a spyware, it gathers classified information from infected systems without the consent of the user and sends gathered information to remote threat actors. T1056.003 Credentials from Password Stores: Credentials from Web Browsers. Krachulka Banking Malware.DLL File Download Variant-1. Let's start with Krachulka. Collection.

Banking 111

Banking Malware Spyware Phishing 111

SecureList

MARCH 25, 2021

Percentage of ICS computers on which malicious objects were blocked, by half-year, 2017 – 2020 ( download ). in H2 compared to H1, 2019 vs 2020 (download 1 , 2 ). Percentage of ICS computers on which malicious objects were blocked, by month, 2018 – 2020 ( download ). Spyware (+1.4 percentage points (p.p.)

Ransomware 126

Ransomware Spyware Internet Internet 126

Security Affairs

NOVEMBER 29, 2019

It is also important to remember that some basic steps can prevent you from falling victim to such spyware: we continue to urge the public to ensure their operating systems and security software are up to date.” “The cybercriminals selling and using the IM-RAT affected the computers of tens of thousands of victims worldwide.

Cybercrime 139

Cybercrime Advertising Spyware Hacking 139

Malwarebytes

OCTOBER 3, 2022

Last week on Malwarebytes Labs: Why (almost) everything we told you about passwords was wrong. APT28 attack uses old PowerPoint trick to download malware. Spyware disguises itself as Zoom downloads. Twitter fixes bug that left devices logged in after password reset. Two new Exchange Server zero-days in the wild.

Spyware 71

Spyware Data breaches Passwords Phishing 71

Malwarebytes

OCTOBER 26, 2021

Some people get so convinced they have spyware on their system that they contact our support team to help them get rid of it. Other password shenanigans. Another privacy related concern we often get asked about are the sextortion emails that try to intimidate the recipient by telling them the attacker has their password.

Media 118

Media Cybersecurity Advertising Passwords 118

SecureList

OCTOBER 4, 2022

While performing regular threat hunting activities, we identified multiple downloads of previously unclustered malicious Tor Browser installers. As the Tor Browser website is blocked in China, individuals from this country often resort to downloading Tor from third-party websites. Download page of the malicious Tor Browser installer.

Encryption 145

Encryption Spyware Malware Software 145

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 98

Spyware Hacking Malware Social Engineering 98

SecureList

SEPTEMBER 3, 2024

The percentage of victims of a particular group (according to its DLS) among victims of all groups published on all DLSs examined during the reporting period ( download ) Number of new modifications In Q2 2024, we discovered five new ransomware families and 4,456 new ransomware variants.

Mobile 114

Mobile Antivirus Adware Ransomware 114

eSecurity Planet

FEBRUARY 17, 2025

Plus, it stops unsafe downloads in Microsoft Edge and other supported apps. It tries to provide features like anti-ransomware, anti-spyware, and parental controls, but that still keeps it behind. McAfee also doesnt offer spyware detection, but Defender does. SmartScreen filter: Designed to keep you safe online.

Antivirus 67

Antivirus Identity Theft VPN Spyware 67

Hot for Security

JUNE 18, 2021

Active for over seven years, Agent Tesla has been used frequently in phishing campaigns seeking to steal user credentials, passwords and sensitive information. The updated password-stealing capabilities and security-dodging techniques paired with the malware distribution-as-a-service business model have proven highly profitable.

Phishing 105

Phishing Malware Spyware Software 105

Hot for Security

JUNE 14, 2021

Furthermore, most consumer-oriented threats focus on stealing data (passwords, credit card information, etc). A vulnerability in WhatsApp allegedly allows threat actors to install spyware onto iPhones. In many cases, no malware is needed to compromise this data. iPhones are not immune to hacks. Weaponizing hype.

Mobile 132

Mobile Malware Spyware Media 132

Identity IQ

FEBRUARY 18, 2021

App downloads. Phishing is a type of social engineering attack whereby hackers send fictitious emails or other communication , from what appears to be a trusted company, to induce victims to reveal personal information such as passwords, usernames or payment details. Weak or Limited Number of Passwords. Bank details. Biometrics.

Identity Theft 119

Identity Theft Passwords Data breaches Scams 119

Security Boulevard

FEBRUARY 17, 2025

Google's reCAPTCHA is not only useless, it's also basically spyware Techspot This study demonstrates Google's reCAPTCHA v2 and v3 are flawed and don't actually keep out bots. Introducing Bitwarden Cupid Vault to securely share (and unshare) passwords with loved ones Bitwarden Bitwarden has already had the ability to securely share passwords.

Surveillance 52

Surveillance Data breaches VPN Malware 52