Security Affairs

AUGUST 12, 2018

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 66

Advertising DNS Firmware Surveillance 66

SecureList

JUNE 3, 2024

The attackers were able to bypass this hardware-based security protection using another hardware feature of Apple-designed SoCs (System on a Chip): they did this by writing the data, destination address and data hash to unknown hardware registers of the chip that are not used by the firmware.

Banking 117

Banking Malware Computers and Electronics Mobile 117

Security Boulevard

FEBRUARY 10, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Privacy Services Mullvad VPN for Windows on ARM is here! Mullvad Mullvad VPN client is now available for Windows ARM desktops. Malware campaigns covered generally target/affect the end user.

Spyware 52

Spyware Surveillance Government Data breaches 52

eSecurity Planet

MARCH 4, 2024

The fix: To eliminate malware infections, perform a factory reset, upgrade to the latest firmware, change all default usernames and passwords, and adjust firewall rules to block exposure to unwanted remote management services. and a medium (CVSS 4.3) level vulnerability.

IoT 117

IoT Internet Internet Ransomware 117

SecureList

SEPTEMBER 21, 2023

They can be made to serve as routers (proxies or VPN servers) to anonymize illicit traffic. Paul has discovered critical vulnerabilities in the firmware and protocols of certain webcam models, and one of the vendors he contacted never even got back to him to discuss remediation. Various ways exist to monetize Illicit access to webcams.

IoT 137

IoT DDOS Passwords Malware 137

Pen Test Partners

MAY 26, 2025

Our investigation revealed spyware with call-forwarding and banking credential capture, likely installed via custom firmware on the device. We traced the entry to an outdated Ivanti VPN, correlated DNS to malware domains (like iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com), and observed 7zip activity linked to data staging.

Banking 59

Banking VPN Ransomware Scams 59

Security Boulevard

JUNE 19, 2024

Eavesdropping has been has been performed by public and private organizations alike to surveil DNS traffic (and potentially hijack it.) Again, generally, many users use the ISP’s DNS resolvers as it is the "default" and most do not know these can be changed in the browser or on the device/network (hardware/firmware permitting).

DNS 69

DNS Encryption Firmware Internet 69

SecureList

OCTOBER 26, 2021

On June 3, Check Point published a report about an ongoing surveillance operation targeting a Southeast Asian government, and attributed the malicious activities to a Chinese-speaking threat actor named SharpPanda. The samples we analyzed mimicked various applications such as private messaging, VPN, and media services.

Malware 145

Malware Government Surveillance Spyware 145

Security Affairs

OCTOBER 10, 2023

This would allow them to view live feeds and record footage, which could be used for surveillance, reconnaissance, or gathering sensitive information. A virtual private network (VPN) for remote access is preferred. Keep camera firmware up to date to address security vulnerabilities and improve overall system security.

Risk 125

Risk Encryption VPN Passwords 125