Responsible Cyber

APRIL 8, 2020

Phishing and Spear Phishing. Despite constant warnings from the cyber security industry, people still fall victim to phishing every day. As cybercrime has become well-funded and increasingly sophisticated, phishing remains one of the most effective methods used by criminals to introduce malware into businesses.

Cybersecurity 98

Cybersecurity DDOS Small Business Phishing 98

Security Affairs

AUGUST 25, 2019

Intel addresses High-Severity flaws in NUC Firmware and other tools. 5 Common Phishing Attacks and How to Avoid Them? App tainted with Ahmyst Open-source spyware appeared on Google Play Store twice. Bluetana App allows detecting Bluetooth card skimmers in just 3 seconds. Hacker publicly releases Jailbreak for iOS version 12.4.

Small Business 79

Small Business Advertising Data breaches Spyware 79

eSecurity Planet

FEBRUARY 26, 2021

The Unified Extensible Firmware Interface (UEFI) scanner is a valuable tool for protecting firmware. Capabilities for scanning firmware are not common in antimalware solutions, setting ESET ahead of the competition in this vertical. This tool can block suspicious emails that may contain spyware, ransomware and phishing websites.

Antivirus 57

Antivirus Firmware Encryption Spyware 57

SecureWorld News

AUGUST 8, 2022

Cybercriminals often use malware to gain access to a computer or mobile device to deploy viruses, worms, Trojans, ransomware, spyware, and rootkits. Remcos, short for Remote Control and Surveillance, was leveraged by malicious cyber actors conducting mass phishing campaigns during the COVID-19 pandemic to steal personal data and credentials.

Malware 98

Malware Banking Penetration Testing Healthcare 98

Security Boulevard

FEBRUARY 10, 2025

Spyware maker Paragon terminates contract with Italian government: media reports TechCrunch This campaign was included in Week 5 of the Privacy Roundup , where Meta disrupted a campaign on WhatsApp targeting approximately 100 users with Paragon Spyware. this is certainly a news item worth paying attention to.

Spyware 52

Spyware Surveillance Government Data breaches 52

Pen Test Partners

JANUARY 14, 2025

This tool allows attackers to leverage the weaknesses in the MediaTek chipsets to perform firmware alterations on the device. This means they can potentially alter the firmware on the device. From a technical perspective, altering the IMEI requires access to certain low-level functions of the phone’s hardware and firmware.

Firmware 75

Firmware Malware Manufacturing Mobile 75

eSecurity Planet

MAY 2, 2024

Compromised Credentials Compromised identities from phishing, info stealers, keyloggers, and bad password habits provide the entry point for most ransomware attacks and data breaches. Sophos: Noted that 43% of all 2023 malware signature updates are for stealers, spyware, and keyloggers often used to steal credentials from devices.

Cybersecurity 121

Cybersecurity DDOS Penetration Testing Passwords 121

SecureList

NOVEMBER 14, 2023

In May, Ars Technica reported that BootGuard private keys had been stolen following a ransomware attack on Micro-Star International (MSI) in March this year (firmware on PCs with Intel chips and BootGuard enabled will only run if it is digitally signed using the appropriate keys).

Hacking 140

Hacking Energy and Utilities Media Malware 140

SecureList

MARCH 1, 2021

The word “covid” in various combinations was typically used in the names of packages hiding spyware and banking Trojans, adware or Trojan droppers. The manufacturer of the mobile device preloads an adware application or a component with the firmware. Pandemic theme in mobile threats. apk and coviddetect.apk.

Mobile 145

Mobile Malware Adware Banking 145

SecureList

NOVEMBER 18, 2022

In July, we reported a rootkit that we found in modified Unified Extensible Firmware Interface (UEFI) firmware, the code that loads and initiates the boot process when the computer is turned on. First, the threat actor sends a spear-phishing email to the potential victim with a lure to download additional documents.

Malware 121

Malware Computers and Electronics Adware Cryptocurrency 121

eSecurity Planet

MARCH 22, 2023

Asset Discovery Controls Unauthorized devices can intercept or redirect network traffic through attacks such as connecting unauthorized computers to the network, deploying packet sniffers to intercept network traffic, or delivering a phishing link to a man-in-the-middle attack to steal login credentials and data.

Firewall 109

Firewall Network Security Penetration Testing Encryption 109

Digital Shadows

NOVEMBER 10, 2022

The level of sophistication used by attackers to mimic the original domains varied greatly, ranging from low quality, obvious phishing pages to more refined efforts mimicking animations and logos. pro is flagged as a phishing domain by multiple security providers. Among these pages, a notable example was the qatar2022[.]pro

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

SecureWorld News

OCTOBER 31, 2024

From zombie botnets to phishing phantoms, these threats might sound like campfire tales, but they're some of the most sinister forces in cybersecurity today. Warding off zombies : Regularly update device firmware, patch IoT devices, and monitor for unusual traffic patterns. Spooky fact : Sophos says the average ransom in 2024 is $2.73

IoT 119

IoT Phishing DDOS Backups 119

eSecurity Planet

FEBRUARY 16, 2021

Attackers often use botnets to send out spam or phishing campaigns to carry out distributed denial of service (DDoS) attacks. Additional features of botnets include spam, ad and click fraud, and spyware. Phishing and Social Engineering. More targeted efforts at specific users or organizations are known as spear phishing.

Malware 105

Malware Adware Spyware Antivirus 105

Security Affairs

JUNE 23, 2024

US government sanctions twelve Kaspersky Lab executives Experts found a bug in the Linux version of RansomHub ransomware UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models Russia-linked APT Nobelium targets French diplomatic entities US bans sale of Kaspersky products due to risks (..)

Firmware 115

Firmware Data breaches Hacking Banking 115

Security Affairs

OCTOBER 1, 2023

million newborns and pregnancy care patients Xenomorph malware is back after months of hiatus and expands the list of targets Smishing Triad Stretches Its Tentacles into the United Arab Emirates Crooks stole $200 million worth of assets from Mixin Network A phishing campaign targets Ukrainian military entities with drone manual lures Alert!

Artificial Intelligence 129

Artificial Intelligence Firmware Data breaches Hacking 129

eSecurity Planet

SEPTEMBER 11, 2023

The fix: ASUS released firmware updates to address the vulnerabilities. Sending phishing emails to engineers can be used as an exploitation technique to get them to import malicious configuration files ( CVE-2023-31171 ), which results in arbitrary code execution. The fix: There’s no immediate fix for the W3LL Phishing Attacks.

VPN 113

VPN Authentication Firmware Phishing 113

eSecurity Planet

OCTOBER 21, 2022

From ransomware attacks locking businesses out of their data until they pay potentially millions of dollars to spyware tracking users’ every move through their infected device, the effects of malware can be devastating. Firmware rootkits are also known as “hardware rootkits.”. Need More Intel on Rootkits?

Malware 75

Malware Adware Spyware Antivirus 75

Security Affairs

DECEMBER 22, 2024

CISA adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog ConnectOnCall data breach impacted over 900,000 individuals Report claims that Serbian authorities abused Cellebrite tool to install NoviSpy spyware Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise (..)

Data breaches 61

Data breaches Cybercrime Spyware Firmware 61