article thumbnail

Serbian student activist’s phone hacked using Cellebrite zero-day exploit

Security Affairs

” Amnesty International said that a 23-year-old student activist (named Vedran to preserve his privacy) was attending a ruling party event in Serbia on December 25, 2024. Timestamp (Local Time) Event 2024-12-25 18:36:10 Vedran turned his phone off. 2024-12-25 20:01:14 Phone turned on for the first time in police station.

Hacking 74
article thumbnail

SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play

SecureList

In January 2025, we uncovered the SparkCat spyware campaign , which was aimed at gaining access to victims’ crypto wallets. Now, we’ve once again come across a new type of spyware that has managed to infiltrate the official app stores. Among the apps where the spyware was found, several were crypto-themed.

Spyware 125
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

APT trends report Q3 2024

SecureList

They are intended to highlight the significant events and findings that we think are important for people to know about. Epeius is a commercial spyware tool developed by an Italian company that claims to provide intelligence solutions to law enforcement agencies and governments.

Malware 113
article thumbnail

Story of the Year: global IT outages and supply chain attacks

SecureList

With large-scale security crises being one of the most relevant threats worldwide, it’s more important than ever to reflect on past events, assess emerging threats, and, most crucially, explore strategies to prevent future incidents.

Internet 104
article thumbnail

Security Affairs newsletter Round 499 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

CISA adds Apple, Oracle Agile PLM bugs to its Known Exploited Vulnerabilities catalog More than 2,000 Palo Alto Networks firewalls hacked exploiting recently patched zero-days Ransomhub ransomware gang claims the hack of Mexican government Legal Affairs Office US DoJ charges five alleged members of the Scattered Spider cybercrime gang Threat actor (..)

article thumbnail

Senator Chides FBI for Weak Advice on Mobile Security

Krebs on Security

Senate staff on mobile threats, more than 140 staffers took them up on that invitation (a remarkably high number considering that no food was offered at the event). “Well-funded foreign intelligence agencies do not have to rely on phishing messages and malicious attachments to infect unsuspecting victims with spyware. .

Mobile 258
article thumbnail

Another Event-Related Spyware App

Schneier on Security

Last month, we were warned not to install Qatar’s World Cup app because it was spyware. This month, it’s Egypt’s COP27 Summit app : The app is being promoted as a tool to help attendees navigate the event. But it risks giving the Egyptian government permission to read users’ emails and messages.

Spyware 335