Security Affairs

JUNE 4, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Spyware 88

Spyware Hacking Malware Social Engineering 88

Security Affairs

JULY 16, 2021

The Joker malware is back, experts spotted multiple malicious apps on the official Google Play store that were able to evade scanners. The spyware is able to steal SMS messages, contact lists, and device information and to sign victims up for premium service subscriptions. ” states a post published by the experts.

Malware 138

Malware Mobile Spyware Encryption 138

Security Affairs

SEPTEMBER 8, 2019

Security experts at Google have removed from Google Play 24 apps because they were infected with a new spyware tracked as “the Joker.” ” Google has removed from Google Play 24 apps because they were infected with a new spyware tracked as “the Joker.” continues the expert. ” states the analysis.

Spyware 95

Spyware Advertising Malware Cryptocurrency 95

Security Affairs

AUGUST 21, 2022

The Donot Team threat actor, aka APT-C-35 , has added new capabilities to its Jaca Windows malware framework. In the past, the Donot Team spyware was found in attacks outside of South Asia. To understand which modules are used in the current infection, the malware communicates with another C2 server.” Pierluigi Paganini.

Malware 95

Malware Spyware Phishing Government 95

Security Affairs

JUNE 15, 2020

The Earth Empusa threat group is distributing new Android spyware, dubbed ActionSpy, through watering hole attacks to targets Turkic minority group. ActionSpy, which may have been around since 2017, is an Android spyware that allows the attacker to collect information from the compromised devices,” reads the report published by Trend Micro.

Spyware 66

Spyware Advertising Encryption Phishing 66

The Last Watchdog

JULY 18, 2023

July 18, 2022 – Around 30,000 websites get hacked every day , with the majority of those cyberattacks due to human error. A new study by HostingAdvice, the premier authority on web hosting, found that 32% of Americans say they’ve gotten hacked from visiting a sketchy website and of those, 53% got a computer virus. Gainesville, Fla.,

Hacking 100

Hacking DDOS Small Business Spyware 100

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The binaries are obfuscated and do some checks to detect if the spyware is running in a Virtual Machine. SecurityAffairs – hacking, FinSpy). Pierluigi Paganini.

Spyware 138

Spyware Surveillance Mobile Advertising 138

SecureWorld News

AUGUST 8, 2022

Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) released a joint Cybersecurity Advisory (CSA) providing details on the top malware strains of 2021. The top malware strains in 2021 included remote access Trojans (RATs), banking Trojans, information stealers, and ransomware.

Malware 85

Malware Banking Healthcare Penetration Testing 85

Security Affairs

SEPTEMBER 10, 2023

Researchers from Kaspersky discovered several Telegram mods on the Google Play Store that contained spyware, the campaign was tracked as Evil Telegram. The collected information is then encrypted and cached into a temporary file named tgsync.s3. The app sends this temporary file to the command server at certain intervals.”

Spyware 122

Spyware Advertising Encryption Hacking 122

Security Affairs

MARCH 8, 2020

Experts uncovered a new Coronavirus (COVID-19 ) -themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan. Experts at MalwareHunterTeam uncovered a new malspam campaign exploiting the fear in the Coronavirus (COVID-19) to deliver malware. states the analysis published by FireEye.

Malware 122

Malware Scams Social Engineering Phishing 122

Security Affairs

JULY 18, 2019

Intezer spotted a new piece of Linux malware dubbed EvilGnome because it disguises as a Gnome extension. The researchers attribute the spyware to the Russia-linked and Gamaredon Group. The attack starts with spear-phishing emails containing weaponized attachments, the malware is distributed via Russian hosting providers.

Spyware 85

Spyware Malware Advertising Cyber Attacks 85

Security Affairs

MARCH 11, 2019

In July, the experts discovered a new sophisticated version of the AZORult Spyware that was involved in a large email campaign on July 18. ” One of the variants analyzed by BleepingComputer encrypts data and appends the.promorad extension to encrypted files, then it creates ransom notes named _readme.txt as shown below. .

Encryption 85

Encryption Ransomware Cryptocurrency Passwords 85

Security Affairs

DECEMBER 3, 2022

SecurityAffairs – hacking, newsletter). Follow me on Twitter: @securityaffairs and Facebook and Mastodon. Pierluigi Paganini. The post Security Affairs newsletter Round 396 appeared first on Security Affairs.

Spyware 94

Spyware Data breaches VPN Hacking 94

Security Affairs

MARCH 4, 2023

FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0

Spyware 85

Spyware Data breaches Retail Ransomware 85

Security Affairs

SEPTEMBER 24, 2023

In 2016, researchers from the non-profit organization CitizenLab published a report that describes a campaign of targeted spyware attacks carried out by the Stealth Falcon. The researchers explained that unlike other malware typically using components written in only one programming language, Deadglyph uses distinct programming languages.

Spyware 117

Spyware Malware Architecture Encryption 117

eSecurity Planet

JUNE 16, 2022

Cyber criminals may damage, destroy, steal, encrypt, expose, or leak data as well as cause harm to a system. Encrypted threats spiked 167%, ransomware increased 105%, and 5.4 billion malware attacks were identified by the report. Also read: Mobile Malware: Threats and Solutions. Ransomware.

Backups 145

Backups Ransomware Firewall Malware 145

Security Affairs

APRIL 16, 2019

Scranos is a powerful cross-platform rootkit-enabled spyware discovered while investigating malware posing as legitimate software like video players, drivers and even anti-virus products. Browsing History Stealer Payload — This payload collects Chrome’s browsing history and sends it to the C&C in an encrypted form.

Spyware 70

Spyware Adware Malware Accountability 70

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 95

Data breaches Malware Mobile Spyware 95

Security Affairs

AUGUST 27, 2021

In order to facilitate file encryption, the ransomware look for processes associated with backups, anti-virus/anti-spyware, and file copying and terminates them. The Hive ransomware adds the.hive extension to the filename of encrypted files. The malware deletes the Hive executable and the hive.bat script. key.hive or *.key.*.

Ransomware 98

Ransomware Encryption Spyware Backups 98

Security Affairs

SEPTEMBER 27, 2020

Google removed this week 17 Android apps from its Play Store because they were infected with the Joker (aka Bread) malware, Zscaler revealed. Security researchers from Zscaler spotter 17 apps in the Play Store that were infected with the Joker (Bread) malware. Recently, we have seen regular uploads of it onto the Google Play store.”

Malware 141

Malware Advertising Spyware Encryption 141

CyberSecurity Insiders

JULY 11, 2022

Reacting to the news on the government spyware like NSO Group Pegasus and Android affecting Hermit malware, the Mobile Giant of Korea said that it offers a firm commitment to safeguarding the personal and sensitive information of its users.

Cyber Attacks 113

Cyber Attacks Spyware Mobile Insurance 113

SecureWorld News

MAY 7, 2023

For instance, a cybercriminal may hack a recruiter's database and email potential candidates posing as a recruiter or employer. The email would include an attachment that when clicked installs malware that steals the individual's sensitive information. These involve viruses, Trojans, ransomware, and spyware, among many others.

Data breaches 69

Data breaches Encryption Phishing Malware 69

Security Affairs

APRIL 3, 2022

The Borat RAT allows its operators to compile the malware binary for performing specific features, including DDoS and ransomware attacks. Ransomware – This module delivers a ransomware payload to the victim’s machine for encrypting users’ files as well as for demanding a ransom. SecurityAffairs – hacking, RAT).

DDOS 115

DDOS Ransomware Spyware Encryption 115

Security Affairs

FEBRUARY 21, 2023

In order to make it impossible for the victims to recover the encrypted files, the ransomware deletes the Volume Shadow Copy Service (VSS) using the Service Control Manager and the Windows backup utility catalog along with any shadow copies. The report from Varonis also includes indicators of compromise (IoCs) that help detect the malware.

Insurance 82

Insurance Ransomware Cyber Insurance Malware 82

SecureWorld News

MARCH 29, 2024

Malvertising acts as a vessel for malware propagation. Scammers and malware operators are increasingly adept at mimicking popular brands in their ad snippets, which makes it problematic for the average user to tell the wheat from the chaff. One of the biggest pitfalls with malvertising is how difficult it can be to detect.

Cybercrime 83

Cybercrime Advertising Engineering Antivirus 83

Security Affairs

AUGUST 30, 2019

Google researchers discovered that iPhone devices could be hacked by tricking owners into visiting specially crafted websites. Researchers at Google Project Zero discovered that it was possible to hack iPhone devices by visiting specially crafted websites. ” reads the report published by Google. . ” wrote Beer.

Spyware 89

Spyware Hacking Advertising Encryption 89

Security Affairs

APRIL 28, 2020

The malware was an info stealer and according to the researchers, it was part of a long-term campaign, tracked as “PhantomLance” that has been active at least since December 2015. We informed Google of the malware, and it was removed from the market shortly after.” SecurityAffairs – PhantomLance, hacking).

Malware 107

Malware Advertising Spyware Marketing 107

Security Affairs

NOVEMBER 8, 2021

In order to facilitate file encryption, the ransomware look for processes associated with backups, anti-virus/anti-spyware, and file copying and terminates them. The Hive ransomware adds the.hive extension to the filename of encrypted files. SecurityAffairs – hacking, ransomware). Pierluigi Paganini.

Computers and Electronics 113

Computers and Electronics Ransomware Retail Spyware 113

SecureList

JANUARY 18, 2023

The threat landscape is constantly updated through new malware and spyware, advanced phishing methods, and new social engineering techniques. Media blackmail: businesses to learn they were hacked from hackers’ public posts with a countdown to publication. Kaspersky detects an average of 400,000 malicious files every day.

Media 117

Media Social Engineering Ransomware Hacking 117

Security Affairs

MAY 23, 2023

In the latest campaign uncovered by Kaspersky, the APT group, used a modular framework dubbed CloudWizard that supports spyware capabilities, including taking screenshots, microphone recording, harvesting Gmail inboxes, and keylogging. The threat actor likely used the PowerMagic backdoor to deliver the modular CommonMagic framework.

Malware 79

Malware Spyware Encryption Phishing 79

Security Affairs

OCTOBER 31, 2021

SecurityAffairs – hacking, newsletter). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 338 appeared first on Security Affairs.

Artificial Intelligence 79

Artificial Intelligence Ransomware Spyware Cryptocurrency 79

Security Affairs

NOVEMBER 14, 2021

SecurityAffairs – hacking, newsletter). If you want to also receive for free the newsletter with the international press subscribe here. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 340 appeared first on Security Affairs.

Spyware 53

Spyware Data breaches Ransomware Retail 53

CyberSecurity Insiders

MARCH 21, 2021

With a VPN like Surfshark to encrypt your online traffic and keep it protected against any security breach, your valuable data isn’t going to get compromised easily anytime soon. Anti-virus and anti-malware . Most external hacking takes place during information transfer over an internet connection. Two-factor authentication .

Small Business 145

Small Business Cyber Attacks VPN Backups 145

Security Affairs

JULY 17, 2019

Hawkeye Keylogger” is an info-stealing malware for sale in the dark-web. Anyone can easily subscribe to the malware service by paying a fee. It has been in continuous development at least since 2013 and the malware authors behind Hawkeye have improved the malware service adding new capabilities and techniques.

Spyware 72

Spyware Malware Passwords Accountability 72

Security Affairs

JUNE 20, 2022

SecurityAffairs – hacking, newsletter). Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). To nominate, please visit:?. Follow me on Twitter: @securityaffairs and Facebook.

Spyware 71

Spyware DNS Surveillance Ransomware 71

Security Affairs

NOVEMBER 17, 2019

Apple Mail stores parts of encrypted emails in plaintext DB. ZoneAlarm forum site hack exposed data of thousands of users. New TA2101 threat actor poses as government agencies to distribute malware. The Australian Parliament was hacked earlier this year. WhatsApp flaw CVE-2019-11931 could be exploited to install spyware.

DDOS 50

DDOS Spyware Advertising Ransomware 50

IT Security Guru

AUGUST 9, 2022

By acting as a “middleman” between your network and device – data transmitted through public Wi-Fi is rarely encrypted. Be cautious when you enter public wi-fi and use VPN to protect you from hacking techniques and phishing attacks. Pay attention to symptoms of malware. Download from official sources .

Data breaches 100

Data breaches Passwords Antivirus Accountability 100