Security Affairs

JULY 21, 2025

Iran-linked APT MuddyWater is deploying new DCHSpy spyware variants to target Android users amid the ongoing conflict with Israel. Lookout researchers ob served Iran-linked APT MuddyWater (aka SeedWorm , TEMP.Zagros , and Static Kitten ) is deploying a new version of the DCHSpy Android spyware in the context of the Israel-Iran conflict.

Spyware 73

Spyware Telecommunications Surveillance VPN 73

Malwarebytes

JUNE 29, 2022

Google’s Threat Analysis Group (TAG) has revealed a sophisticated spyware activity involving ISPs (internet service providers) aiding in downloading powerful commercial spyware onto users’ mobile devices. The spyware, dubbed Hermit, is reported to have government clients much like Pegasus.

Spyware 112

Spyware Government Social Engineering Mobile 112

Security Boulevard

JULY 29, 2022

The post Solved: Subzero Spyware Secret — Austrian Firm Fingered appeared first on Security Boulevard. DSIRF GmbH codenamed ‘Knotweed’ by Microsoft and RiskIQ.

Spyware 144

Spyware Social Engineering Security Awareness Engineering 144

Security Boulevard

SEPTEMBER 25, 2023

Apple Scrambled to Fix 3 More CVEs: Egyptian opposition presidential candidate Ahmed Eltantawy targeted “by the government. The post More iOS Zero Days, More Mercenary Spyware — This Time: Cytrox Predator appeared first on Security Boulevard.

Spyware 126

Spyware Government Social Engineering Data privacy 126

Security Boulevard

MAY 30, 2023

Intellexa mercenary spyware chains five unpatched bugs—plus ‘Alien’ technology The post ‘Predator’ — Nasty Android Spyware Revealed appeared first on Security Boulevard.

Spyware 121

Spyware Technology Social Engineering Security Awareness 121

Security Boulevard

MAY 3, 2022

The notorious spyware, sold by NSO Group “only to governments,” caused large amounts of data to be exfiltrated. Hacked by NSO Pegasus Spyware (or was it?) The prime minister and the defense minister of Spain were infected with Pegasus. The post Spanish Govt. appeared first on Security Boulevard.

Spyware 105

Spyware Hacking Government Social Engineering 105

Security Boulevard

JUNE 18, 2025

PAFACA Pause Persists: Won’t somebody PLEASE think of the children? The post Trump’s TikTok Tarry — Yet Again, Ban-Can Kicked Down the Road appeared first on Security Boulevard.

Social Engineering 123

Social Engineering Spyware Media Data privacy 123

Security Boulevard

JUNE 28, 2023

The post Ironic: LetMeSpy Spyware Hackers Were Hacked (by Hackers) appeared first on Security Boulevard. Content warning: Abuse, stalking, controlling behavior, Schadenfreude, irony, doxxing.

Spyware 110

Spyware Hacking Social Engineering Data breaches 110

Security Boulevard

AUGUST 22, 2022

NSO, notorious producer of the Pegasus nation-state spyware, is struggling. The post NSO Group Fires CEO — and 100 Staff — in Spyware ‘Streamlining’ appeared first on Security Boulevard. So it’s dumped its CEO, Shalev Hulio, and around 100 employees.

Spyware 98

Spyware Social Engineering Security Awareness Engineering 98

Joseph Steinberg

JULY 13, 2022

Apple last week announced new security features specifically intended to offer “specialized additional protection to users who may be at risk of highly targeted cyberattacks from private companies developing state-sponsored mercenary spyware.”. Flip phones are not totally immune from government surveillance and action either.).

Cybersecurity 258

Cybersecurity Government Artificial Intelligence Social Engineering 258

Security Boulevard

JULY 19, 2023

Adds ‘Mercenary Spyware’ Firms to Ban List appeared first on Security Boulevard. European cousins Intellexa and Cytrox essentially banned by Commerce Dept. Predator/ALIEN not welcome in U.S. The post Biden Admin.

Spyware 98

Spyware Social Engineering Security Awareness Engineering 98

Heimadal Security

APRIL 8, 2022

Hamas-linked cybercrime organization dubbed ‘APT-C-23’ was noticed catfishing Israeli officials working in defense, law, enforcement, and government institutions, resulting in the deployment of new malware. Experts at security […].

Hacking 97

Hacking Social Engineering Spyware Cybercrime 97

Malwarebytes

JANUARY 25, 2024

Reconnaissance and social engineering are specific fields where AI can be deployed. Currently only state sponsored groups, professional spyware vendors, and the large criminal operations have access to, and know how to use advanced AI tools to increase the effectivity of their attacks.

Ransomware 102

Ransomware Government Social Engineering Spyware 102

Security Boulevard

JUNE 4, 2025

Farcebok: Zuckerbergs privacy pledge revealed as ineffectual The post Metas Secret Spyware: Local Mess Hack Tracks You Across the Web appeared first on Security Boulevard.

Spyware 82

Spyware Hacking Social Engineering Media 82

eSecurity Planet

FEBRUARY 22, 2022

There is no need for social engineering , as the program can implant backdoors directly without forced consent. NSO Group’s Pegasus software has been routinely in the headlines in recent years for using zero-click attacks to install its spyware. Spyware and Zero-Days: A Troubling Market.

Spyware 124

Spyware Software Government Social Engineering 124

Malwarebytes

AUGUST 26, 2021

Researchers from Citizen Lab, an academic research and development lab based in the University of Toronto in Canada, has recently discovered that an exploit affecting iMessage is being used to target Bahraini activists with the Pegasus spyware. The attackers just deploy the exploit. No need for the target to click something.

Spyware 107

Spyware Surveillance Social Engineering Government 107

Security Boulevard

JUNE 23, 2023

Vulns unpatched for FOUR years: ‘Triangulation’ spyware said to use backdoor Apple gave to NSA. The post Apple Fixes 0-Days — Russia Says US Used for Spying appeared first on Security Boulevard.

Spyware 145

Spyware Social Engineering Engineering Mobile 145

Security Affairs

SEPTEMBER 3, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 131

Social Engineering Spyware Data breaches Surveillance 131

SecureWorld News

JULY 11, 2022

The United States government has attributed the hack to a North Korean state-sponsored advanced persistent threat (APT) known as the Lazarus Group. The offer was emailed as a PDF document, and once it was downloaded, spyware infected the company's systems. The vulnerability was fixed by adding additional validator nodes.".

Social Engineering 98

Social Engineering Hacking Cryptocurrency Cybercrime 98

Security Boulevard

JULY 20, 2021

Yet another zero-day bug in iOS has allowed notorious spyware vendor NSO Group to break into the iPhones of journalists and activists. The post Apple’s Insecure iPhone Lets NSO Hack Journalists (Again) appeared first on Security Boulevard.

Hacking 118

Hacking Spyware Social Engineering Security Awareness 118

Security Affairs

MARCH 8, 2020

FormBook data-stealing malware was used with cyber espionage purposes, like other spyware it is capable of extracting data from HTTP sessions, keystroke logging, stealing clipboard contents. See Using Caution with Email Attachments and Avoiding Social Engineering and Phishing Scams for more information.

Malware 145

Malware Scams Social Engineering Phishing 145

Security Affairs

NOVEMBER 25, 2020

Since at least 2017, the prolific gang compromised at least 500,000 government and private sector companies in more than 150 countries. Business Email Compromise (BEC) is a type of email phishing attack that relies on social engineering. The investigation continues as some of the gang members remain at large.

Cybercrime 141

Cybercrime Phishing Social Engineering Spyware 141

SecureList

JANUARY 18, 2023

The threat landscape is constantly updated through new malware and spyware, advanced phishing methods, and new social engineering techniques. Last year, the cybersecurity of corporations and government agencies was more significant than ever before, and will become even more so in 2023.

Media 136

Media Social Engineering Ransomware Hacking 136

SecureList

MAY 27, 2022

The attackers study their victims carefully and use the information they find to frame social engineering attacks. Subsequently, DDoS attacks hit some government websites. One of the things you can do to protect yourself from advanced mobile spyware is to reboot your device on a daily basis. Other malware.

Phishing 128

Phishing Spyware Firmware Malware 128

Security Affairs

NOVEMBER 15, 2023

Source: Cybernews Usernames Names Government ID numbers (CURP) Phone numbers Email addresses Home addresses Dates of Birth Gender KYC status IP addresses used to register for an account IP addresses used to log in Deposit amounts Withdrawal amounts Notes on users, submitted by admins and customer support agents. Amount of leaked data.

Passwords 104

Passwords Identity Theft Social Engineering Spyware 104

SecureList

NOVEMBER 30, 2021

Later that month, representatives from the Israeli government visited the offices of NSO as part of an investigation into the claims. And in October, India’s Supreme Court commissioned a technical committee to investigate whether the government had used Pegasus to spy on its citizens.

Malware 135

Malware Mobile Spyware Surveillance 135

SecureList

APRIL 27, 2021

This resulted in the deployment of a custom backdoor, named Sunburst, on the networks of more than 18,000 SolarWinds customers, including many large corporations and government bodies, in North America, Europe, the Middle East and Asia. One of those Fobushell samples was identical to another we previously identified on a Zebrocy C2 server.

Malware 145

Malware Government Spyware Social Engineering 145

SecureWorld News

MARCH 29, 2024

This ends up executing sketchy code that installs viruses, ransomware, spyware, or adware behind the victim's back. One way or another, the fact persists that search engine abuse can amplify the problem. A mix of social engineering, hacking, and abuse of legitimate services makes this style of online crime incredibly effective.

Cybercrime 109

Cybercrime Advertising Engineering Antivirus 109

Herjavec Group

AUGUST 26, 2021

1970-1995 — Kevin Mitnick — Beginning in 1970, Kevin Mitnick penetrates some of the most highly-guarded networks in the world, including Nokia and Motorola, using elaborate social engineering schemes, tricking insiders into handing over codes and passwords, and using the codes to access internal computer systems.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

Hacker's King

OCTOBER 3, 2024

Typical targets for zero-day attacks include: Government agencies Large companies People with access to important data , like trade secrets Ordinary users : Hackers can use vulnerabilities to take control of computers and create botnets. Researchers can get paid by companies or governments for finding these weaknesses (the "white market").

Media 52

Media Spyware Accountability Marketing 52

SecureList

NOVEMBER 1, 2022

In most cases, the targets appear to be diplomatic and government organizations in Europe. In June, we identified a previously unknown Android spyware app that targets Persian-speaking individuals. The spyware itself collects various data from the victims’ devices, such as call logs or lists of contacts. Final thoughts.

Malware 145

Malware Ransomware Spyware Encryption 145

SecureList

NOVEMBER 14, 2023

The rise of destructive attacks In December of last year, shortly after we released our predictions for 2023, Russian government agencies were reported to have been targeted by a data wiper called CryWiper. This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware.

Hacking 137

Hacking Malware Energy and Utilities Government 137

Security Boulevard

AUGUST 5, 2024

For You Plague: U.S. Justice Dept. and Federal Trade Commission file lawsuit, alleging TikTok broke the COPPA law, plus a previous injunction. The post TikTok Abuses Kids, say DoJ and FTC appeared first on Security Boulevard.

Social Engineering 126

Social Engineering Spyware Media Data privacy 126

Security Boulevard

MAY 8, 2024

PAFACA SueTok: U.S. Courts “likely” to rule whether new law is constitutional—or even practical. The post TikTok Ban — ByteDance Sues US to Kill Bill appeared first on Security Boulevard.

Social Engineering 131

Social Engineering Spyware Media Data privacy 131

Security Boulevard

JUNE 2, 2023

Tit-For-Tat Triangulation Trojan Talk: Backdoor inserted at U.S. behest, alleges FSB. The post Russia Says NSA Hacked iOS With Apple’s Help — we Triangulate Kaspersky’s Research appeared first on Security Boulevard.

Hacking 145

Hacking Social Engineering Spyware Security Awareness 145

Security Boulevard

MAY 8, 2023

Clock Ticking for U.S. Ban: FT’s Cristina Criddle claims ByteDance spied on her—because she wrote damaging stories about TikTok. The post Knives Out for TikTok as Journo Reveals her Spy Story appeared first on Security Boulevard.

Social Engineering 144

Social Engineering Spyware Security Awareness Engineering 144

SecureList

JULY 27, 2023

Following this, we released the first of a series of additional reports describing the final payload in the infection chain: a highly sophisticated spyware implant that we dubbed “TriangleDB” Operating in memory, this implant periodically communicates with the C2 (command and control) infrastructure to receive commands.

Malware 98

Malware Government Phishing Social Engineering 98