Security Affairs

NOVEMBER 26, 2021

A threat actor, tracked as APT C-23, is using new powerful Android spyware in attacks aimed at targets in the Middle East. The APT C-23 cyberespionage group (also known as GnatSpy, FrozenCell, or VAMP) continues to target entities in the Middle East with enhanced Android spyware masqueraded as seemingly harmless app updates (i.e.

Spyware 94

Spyware Social Engineering Surveillance Engineering 94

Security Affairs

JUNE 22, 2020

Researchers at Amnesty International collected evidence that a Moroccan journalist was targeted with network injection attacks using NSO Group ‘s spyware. This attack scenario sees attackers monitoring and manipulating the Internet traffic of the target. reads the analysis published by Amnesty International in October.

Spyware 114

Spyware Surveillance Mobile Advertising 114

Security Affairs

MARCH 10, 2024

Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp Cybercrime BlackCat Ransomware Affiliate TTPs American Express credit cards EXPOSED in third-party vendor data breach – account numbers and names among details accessed in hack LockBit 3.0’S

Spyware 88

Spyware Data breaches Hacking Ransomware 88

Security Affairs

JUNE 28, 2019

Many experts linked the Regin malware to the Five Eyes alliance , they found alleged references to the super spyware in a number of presentations leaked by Edward Snowden and according to malware researchers, it has been used in targeted attacks against government agencies in the EU and the Belgian telecoms company Belgacom.

Spyware 79

Spyware Malware Advertising Authentication 79

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. This week, Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Surveillance 113

Surveillance Mobile Spyware Telecommunications 113

Security Affairs

OCTOBER 5, 2022

In the OnionPoison campaign, threat actors shared a link to a malicious Tor installer posting it on a popular Chinese-language YouTube channel providing info on the anonymity on the internet. The experts also discovered that the libraries bundled with the malicious Tor Browser is infected with spyware. “The file freebl3.dll

Spyware 86

Spyware Accountability Software Passwords 86

Security Affairs

APRIL 14, 2024

Crooks manipulate GitHub’s search results to distribute malware BatBadBut flaw allowed an attacker to perform command injection on Windows Roku disclosed a new security breach impacting 576,000 accounts LastPass employee targeted via an audio deepfake call TA547 targets German organizations with Rhadamanthys malware CISA adds D-Link multiple (..)

Data breaches 105

Data breaches Social Engineering Malware Hacking 105

Security Affairs

AUGUST 28, 2022

In June, researchers from Google’s Threat Analysis Group (TAG) revealed that the Italian surveillance firm RCS Labs was helped by some Internet service providers (ISPs) in Italy and Kazakhstan to infect Android and iOS users with their spyware. Follow me on Twitter: @securityaffairs and Facebook.

Surveillance 133

Surveillance Spyware Mobile Hacking 133

Security Affairs

JULY 23, 2023

Multiple DDoS botnets were observed targeting Zyxel devices CISA warns of attacks against Citrix NetScaler ADC and Gateway Devices Experts believe North Korea behind JumpCloud supply chain attack Nice Suzuki, sport: shame dealer left your data up for grabs Experts attribute WyrmSpy and DragonEgg spyware to the Chinese APT41 group ALPHV/BlackCat and (..)

DDOS 89

DDOS Hacking Spyware Surveillance 89

Security Affairs

MARCH 24, 2024

Government’s Antitrust Case Against Apple Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Ramadan )

Malware 100

Malware Cybercrime Hacking Cyber threats 100

The Last Watchdog

JANUARY 28, 2019

Consider that most of us spend more time navigating the Internet on our laptops and smartphones than we do behind the wheel of a car. But the larger point is that Xbash is just one of dozens of malware families circulating far and wide across the Internet. Credential stuffing campaigns have become part of the fabric of the Internet.

Passwords 196

Passwords Password Management Antivirus Internet 196

Security Affairs

DECEMBER 30, 2019

Security experts have detected and analyzed some of the tools in its arsenals, such as the popular Pegasus spyware (for iOS) and Chrysaor (for Android). In September 2018, a report published by Citizen Lab revealed that the NSO Pegasus spyware was used against targets across 45 countries worldwide.

Cybercrime 60

Cybercrime Surveillance Spyware Government 60

Security Affairs

JUNE 17, 2023

Margaret’s Health is the first hospital to cite a cyberattack as a reason for its closure A database containing data of +8.9 Margaret’s Health is the first hospital to cite a cyberattack as a reason for its closure A database containing data of +8.9

Data breaches 87

Data breaches DDOS Backups Firewall 87

Security Affairs

JUNE 21, 2020

Maze ransomware gang hacked M&A firm Threadstone Advisors LLP Ransomware attack disrupts operations at Australian beverage company Lion Tech firms suspend use of ‘biased facial recognition technology Accessories giant Claires is the victim of a Magecart attack, credit card data exposed Black Kingdom ransomware operators exploit Pulse VPN flaws (..)

DDOS 94

DDOS Spyware Mobile Advertising 94

Security Affairs

NOVEMBER 15, 2023

Source: Cybernews The exposed phone numbers can be exploited for spam, malware and spyware attacks, SIM swapping, and the discovery of user accounts on platforms like WhatsApp, Signal, and others. IP addresses are used to ensure that internet communications are sent and received by the intended device.

Passwords 104

Passwords Identity Theft Social Engineering Spyware 104

Security Affairs

JANUARY 6, 2022

The experts pointed out that the phone remains fully functional and is still connected to the Internet despite that all physical feedback have been disabled, this means that a spyware can still spy on the users. “Since iOS 15, Apple introduced a new feature allowing users to track their phone even when it’s been turned off.

Spyware 87

Spyware Malware Internet Internet 87

Security Affairs

JANUARY 12, 2022

The main module performs the following operations: Validate network connection – Upon execution, the script waits for an active internet connection by making HTTP POST requests to google.com with the parameter hi=hi.

InfoSec 104

InfoSec Spyware Malware Internet 104

Security Affairs

MARCH 22, 2021

European ICS engineering organizations were mainly targeted by phishing campaigns attempting to deliver spyware and cryptominers. Experts reported that the majority of computers in the ICS engineering sector are represented by desktop systems, but laptops remain more exposed to attacks via the internet, removable media devices, and email.

Engineering 133

Engineering VPN Accountability Software 133

Security Affairs

JULY 17, 2019

Hash 32951a56e3fcd8f5b006c0b64ec694ddf722eba71e2093f7ee90f57856941f3d Threat Hawkey Spyware Brief Description Hawkey Spyware inside a Visual Basic Packer Ssdeep 12288:GVwYvwrMkE9LfRUXkpW7zGidwY/rwxOp8mH:COrI9zRUJfGCfzw0. Table 1: Information about the PE file inside the ISO image. Figure 1: Fake.bat file inside the ISO archive.

Spyware 74

Spyware Malware Passwords Accountability 74

Malwarebytes

JUNE 7, 2021

Malicious hackers might use tools like computer viruses, spyware, ransomware, Trojan horses, and more to further their goals. A degree in computer science or information security and a background in military intelligence can be useful but isn’t necessary. Many people wonder what motivates hackers who have had intentions.

Social Engineering 91

Social Engineering Hacking Spyware Antivirus 91

Security Affairs

MAY 23, 2023

In the latest campaign uncovered by Kaspersky, the APT group, used a modular framework dubbed CloudWizard that supports spyware capabilities, including taking screenshots, microphone recording, harvesting Gmail inboxes, and keylogging.

Malware 77

Malware Spyware Encryption Phishing 77

Security Affairs

JULY 13, 2019

Microsoft released Patch Tuesday security updates for July 2019. Parents Guide for Safe YouTube and Internet Streaming for Kids. New FinFisher spyware used to spy on iOS and Android users in 20 countries. Adobe Patch Tuesday updates for July 2019 address only 5 minor flaws. Kali Linux is now available for Raspberry Pi 4.

Data breaches 52

Data breaches Spyware Advertising Government 52

Security Affairs

JUNE 18, 2019

The traces collected by Amnesty International was corroborated by the findings of the investigation conducted by researchers at the internet watchdog Citizen Lab. Citizen Lab collected evidence of attacks against 175 targets worldwide carried on with the NSO spyware.

Surveillance 55

Surveillance Spyware Software Advertising 55

Security Affairs

AUGUST 1, 2022

An Australian national has been charged for the creation and sale of the Imminent Monitor (IM) spyware, which was also used for criminal purposes. The 24-year-old Australian national Jacob Wayne John Keen has been charged for his alleged role in the development and sale of spyware known as Imminent Monitor (IM). Pierluigi Paganini.

Spyware 105

Spyware Malware Cybercrime Hacking 105

Security Affairs

JULY 18, 2019

The malware operates similarly to previously reported variants, it implements spyware capabilities and allows the attacker to get remote access to the compromised machine. The APT group used also newer versions of tainted WinRAR software, as well as a tool called Internet Download Manager (IDM).

Malware 61

Malware Software Spyware Advertising 61

Security Affairs

SEPTEMBER 15, 2019

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. Experts found Joker Spyware in 24 apps in the Google Play store. Once again thank you! Toyota Boshoku Corporation lost over $37 Million following BEC attack. WordPress 5.2.3

Spyware 56

Spyware Advertising Hacking IoT 56

Security Affairs

NOVEMBER 8, 2019

” A new wave of attacks could exploit the vulnerability to spread more dangerous and destructive malware, like ransomware or spyware. “These attacks were likely initiated as port scans for machines with vulnerable internet-facing RDP services. ” concludes Microsoft.

Penetration Testing 65

Penetration Testing Malware Advertising Spyware 65

Security Affairs

SEPTEMBER 28, 2019

Following the disclosure of the Simjacker attack, the researcher Lakatos from Ginno Security Lab discovered that another dynamic SIM toolkit, called Wireless Internet Browser (WIB), can be exploited in a similar way. ” reads a blog post published by the researcher.

Hacking 89

Hacking Mobile Risk Advertising 89

SecureList

NOVEMBER 23, 2021

For instance, we see a new trend emerging in the criminal ecosystem of spyware-based authentication data theft, with each individual attack being directed at a very small number of targets (from single digits to several dozen). Known vulnerabilities in internet-facing hardware are also sure to remain a popular penetration vector.

Spyware 102

Spyware Phishing Cybercrime Energy and Utilities 102

The Last Watchdog

FEBRUARY 28, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

Joseph Steinberg

JULY 13, 2022

Apple last week announced new security features specifically intended to offer “specialized additional protection to users who may be at risk of highly targeted cyberattacks from private companies developing state-sponsored mercenary spyware.”.

Cybersecurity 244

Cybersecurity Artificial Intelligence Government Social Engineering 244

CyberSecurity Insiders

JANUARY 31, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Malware 107

Malware Computers and Electronics Adware Spyware 107

Security Affairs

MAY 8, 2020

It should be noted that some of the tech companies provide a wide range of Internet-related services and some of them, like cloud storages and email services, form separate categories. They, in turn, let spyware and backdoors move ahead and become the second most popular malware with a 35-percent share.

Phishing 56

Phishing Spyware Banking Malware 56

Security Affairs

JANUARY 9, 2022

“Journalists, dissidents, and other persons around the world have been targeted and tracked using these tools, which allow malign actors to infect mobile and internet-connected devices with malware over both WiFi and cellular data connections.” ” reads the guidance.

Surveillance 127

Surveillance Mobile Spyware Malware 127

Security Affairs

JUNE 21, 2021

The British Security Service, also known as MI5, has seized the mobile devices used by PM Boris Johnson over concerns that were raised after the discovery of the availability of its number online for the last 15 years. ” reported the DailyMail.

Risk 140

Risk Mobile Spyware Hacking 140

Security Affairs

DECEMBER 5, 2021

Hundreds of vulnerabilities in common Wi-Fi routers affect millions of users German BSI agency warns of ransomware attacks over Christmas holidays Cuba ransomware gang hacked 49 US critical infrastructure organizations CISA warns of vulnerabilities in Hitachi Energy products NSO Group spyware used to compromise iPhones of 9 US State Dept officials (..)

Spyware 84

Spyware Ransomware Hacking VPN 84

Security Affairs

JANUARY 21, 2022

“The purpose of the implant is to facilitate the deployment of user-mode malware that stages execution of further payloads downloaded from the internet;” reads the analysis published by Kaspersky. A UEFI bootkit implanted in the firmware could not be detected by AVs and any defense solution running on the OS level.

Firmware 130

Firmware Malware Spyware Surveillance 130