Hot for Security

JUNE 15, 2021

Our mobile devices are not just a means to communicate with others. Mobile security is often overlooked by many technology users, who dismiss the reality of security risks brought by careless interactions with the digital world. Threat actors know that users often behave recklessly with their smart devices. Back up data.

Mobile 137

Mobile Banking Phishing Social Engineering 137

Security Affairs

NOVEMBER 26, 2021

A threat actor, tracked as APT C-23, is using new powerful Android spyware in attacks aimed at targets in the Middle East. The APT C-23 cyberespionage group (also known as GnatSpy, FrozenCell, or VAMP) continues to target entities in the Middle East with enhanced Android spyware masqueraded as seemingly harmless app updates (i.e.

Spyware 93

Spyware Social Engineering Surveillance Engineering 93

Security Boulevard

AUGUST 22, 2022

NSO, notorious producer of the Pegasus nation-state spyware, is struggling. The post NSO Group Fires CEO — and 100 Staff — in Spyware ‘Streamlining’ appeared first on Security Boulevard. So it’s dumped its CEO, Shalev Hulio, and around 100 employees.

Spyware 98

Spyware Social Engineering Security Awareness Engineering 98

Security Boulevard

MAY 3, 2022

The notorious spyware, sold by NSO Group “only to governments,” caused large amounts of data to be exfiltrated. Hacked by NSO Pegasus Spyware (or was it?) The prime minister and the defense minister of Spain were infected with Pegasus. The post Spanish Govt. appeared first on Security Boulevard.

Spyware 105

Spyware Hacking Government Social Engineering 105

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 86

Spyware Hacking Malware Social Engineering 86

Security Affairs

SEPTEMBER 3, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 105

Social Engineering Spyware Data breaches Surveillance 105

Google Security

MAY 15, 2024

In addition to our new suite of advanced theft protection features to help keep your device and data safe in the case of theft, we’re also focusing increasingly on providing additional protections against mobile financial fraud and scams. We’re also sharing new tools and policies to help developers build safer apps and keep their users safe.

Scams 82

Scams Threat Detection Social Engineering Surveillance 82

Security Boulevard

JUNE 23, 2023

Vulns unpatched for FOUR years: ‘Triangulation’ spyware said to use backdoor Apple gave to NSA. The post Apple Fixes 0-Days — Russia Says US Used for Spying appeared first on Security Boulevard.

Spyware 145

Spyware Social Engineering Engineering Risk 145

Malwarebytes

APRIL 11, 2023

In a recent tweet , the FBI office in Denver warned consumers against using free public charging stations, stating that criminals have managed to hijack public chargers with the objective of infecting devices with malware or other software that can give hackers access to your phone, tablet or computer. How would juice jacking work?

Mobile 98

Mobile Banking Malware Spyware 98

Security Boulevard

MARCH 8, 2024

Hilltop BillTok: ByteDance mobilizing addicted user base, as U.S. TikTok ban steamrolls through Capitol Hill after unanimous committee vote. The post TikTok Ban Incoming — but ByteDance Fights Back appeared first on Security Boulevard.

Mobile 128

Mobile Social Engineering Spyware Media 128

eSecurity Planet

FEBRUARY 22, 2022

Most attacks make would-be victims click to install malware or redirect them to a phishing page to steal their credentials. There is no need for social engineering , as the program can implant backdoors directly without forced consent. Spyware and Zero-Days: A Troubling Market. Zero-click attacks remove this hurdle.

Spyware 114

Spyware Software Government Social Engineering 114

Security Boulevard

JULY 20, 2021

Yet another zero-day bug in iOS has allowed notorious spyware vendor NSO Group to break into the iPhones of journalists and activists. The post Apple’s Insecure iPhone Lets NSO Hack Journalists (Again) appeared first on Security Boulevard.

Hacking 119

Hacking Spyware Social Engineering Security Awareness 119

SecureList

NOVEMBER 22, 2022

Unlike common stealers, this malware gathered data that can be used to identify the victims, such as browsing histories, social networking account IDs and Wi-Fi networks. This has become a real stand-alone business in the dark web ( Malware-as-a-Service , MaaS). Mobile banking Trojans on the rise. million downloads.

Cryptocurrency 87

Cryptocurrency Mobile Ransomware Banking 87

eSecurity Planet

FEBRUARY 16, 2021

Malware, short for “malicious software,” is any unwanted software on your computer that, more often than not, is designed to inflict damage. Since the early days of computing, a wide range of malware types with varying functions have emerged. Malicious mobile app. Best Practices to Defend Against Malware.

Malware 105

Malware Adware Spyware Antivirus 105

SecureList

NOVEMBER 17, 2021

The Israeli Defense Forces (IDF) have claimed that threat actors have been using catfishing to lure Israeli soldiers into installing spyware. This included DarkHotel and APT29 (aka CozyDuke and CozyBear) with their WellMess malware ( as attributed by the UK NCSC (National Cyber Security Centre ). Mobile devices exposed to wide attacks.

Mobile 128

Mobile Surveillance Ransomware Government 128

Digital Shadows

NOVEMBER 10, 2022

The malicious web page where we landed after clicking on the chat box Fake mobile apps Along with a reputable domain name, most organizations have now developed their own mobile app, used to communicate with customers, create engagement, and foster brand loyalty.

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52

Identity IQ

JULY 17, 2023

Malware : Malicious software, such as viruses or spyware, can infect your devices and be used to steal your credentials. Social Engineering : Cybercriminals manipulate and deceive individuals into divulging their credentials through psychological manipulation or impersonation.

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Identity IQ

JULY 17, 2023

Malware : Malicious software, such as viruses or spyware, can infect your devices and be used to steal your credentials. Social Engineering : Cybercriminals manipulate and deceive individuals into divulging their credentials through psychological manipulation or impersonation.

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Security Boulevard

DECEMBER 1, 2023

For you plague, still: States can’t just ban apps, says federal judge. The post TikTok Ban Banned — Montana Loses in US Court appeared first on Security Boulevard.

Digital transformation 127

Digital transformation Social Engineering Spyware Data privacy 127

Security Boulevard

MARCH 18, 2024

7521 momentum builds: Shou Zi Chew plays for time, while Electronic Frontier Foundation says TikTok-kill bill is DOA. The post TikTok ‘Ban’ — ByteDance CEO and EFF are BFFs appeared first on Security Boulevard.

Social Engineering 85

Social Engineering Spyware Media Data privacy 85

CyberSecurity Insiders

JANUARY 31, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Malware 107

Malware Computers and Electronics Adware Spyware 107

Security Boulevard

JUNE 2, 2023

Tit-For-Tat Triangulation Trojan Talk: Backdoor inserted at U.S. behest, alleges FSB. The post Russia Says NSA Hacked iOS With Apple’s Help — we Triangulate Kaspersky’s Research appeared first on Security Boulevard.

Hacking 145

Hacking Social Engineering Spyware Security Awareness 145

Security Boulevard

MAY 8, 2023

Clock Ticking for U.S. Ban: FT’s Cristina Criddle claims ByteDance spied on her—because she wrote damaging stories about TikTok. The post Knives Out for TikTok as Journo Reveals her Spy Story appeared first on Security Boulevard.

Social Engineering 144

Social Engineering Spyware Security Awareness Engineering 144

Security Boulevard

DECEMBER 28, 2023

“No Ordinary Vulnerability” — Operation Triangulation research uncovers new details of fantastic attack chain. The post NSA iPhone Backdoor? Apple Avoids Russian Blame Game appeared first on Security Boulevard.

Digital transformation 85

Digital transformation Social Engineering Spyware Data privacy 85

eSecurity Planet

OCTOBER 21, 2022

Anyone who has used a computer for any significant length of time has probably at least heard of malware. Malware has been present in the digital space since the 1980s, with early prank malware like the Morris Worm or the (c)Brain. However, malware is not quite as amusing in a modern context. How Does Malware Work?

Malware 69

Malware Adware Spyware Antivirus 69

The Last Watchdog

FEBRUARY 28, 2021

Regardless of how familiar you are with Information Security, you’ve probably come across the term ‘malware’ countless times. From accessing your business-critical resources and sensitive information to halting business operations and services, a malware infection can quickly become an organization’s worst nightmare come true.

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

Security Boulevard

DECEMBER 17, 2021

Researchers have reverse engineered NSO group’s recent zero-click iPhone exploit. And it’s a doozy. The post NSO Zero-Click Exploit: Turing-Complete CPU in Image File appeared first on Security Boulevard.

Engineering 141

Engineering Social Engineering Spyware Security Awareness 141

SecureList

MAY 27, 2022

Non-mobile statistics. Mobile statistics. Our analysis of the rogue firmware, and other malicious artefacts from the target’s network, revealed that the threat actor behind it had tampered with the firmware to embed malware that we call MoonBounce. IT threat evolution in Q1 2022. IT threat evolution in Q1 2022.

Phishing 103

Phishing Spyware Firmware Malware 103

Security Affairs

JULY 4, 2023

A Mexican threat actor that goes online with the moniker Neo_Net is behind an Android malware campaign targeting banks worldwide. Furthermore, due to the simplicity of SMS spyware, it can be difficult to detect, as it only requires permission to send and view SMS messages.” The case was reported by security researcher Pol Thill.

Banking 79

Banking Phishing Social Engineering Authentication 79

Security Boulevard

OCTOBER 21, 2022

TikTok parent ByteDance is planning to track the location of certain targeted individuals on U.S. soil, using a specialist Chinese team. The post TikTok ‘Will’ Spy on US Citizens — Say Sources appeared first on Security Boulevard.

Social Engineering 98

Social Engineering Spyware Security Awareness Engineering 98

SecureList

NOVEMBER 30, 2021

Based on forensic analysis of numerous mobile devices, Amnesty International’s Security Lab found that the software was repeatedly used in an abusive manner for surveillance. Based on our observations, this is further complicated by the deployment of non-persistent malware, which leaves almost no traces after reboot.

Malware 101

Malware Mobile Spyware Surveillance 101

Security Boulevard

JULY 11, 2022

NSO Group, notorious makers of the notorious Pegasus spyware, has been in acquisition talks with huge defense contractor L3Harris. The post US Gov’t Flip-Flops on NSO Group Sale to L3Harris appeared first on Security Boulevard.

Spyware 98

Spyware Social Engineering Security Awareness Engineering 98

SecureList

FEBRUARY 16, 2023

Attackers actively used social engineering techniques in their emails, adding signatures with logos and information from specific organizations, creating a context appropriate to the company’s profile, and applying business language. In 2022, we saw an evolution of malicious emails masquerading as business correspondence.

Phishing 90

Phishing Scams Accountability Energy and Utilities 90

SecureList

NOVEMBER 18, 2022

Non-mobile statistics. Mobile statistics. Rootkits are malware implants that are installed deep in the operating system. However, on one of the infected machines, we found malware that we think is probably related to CosmicStrand. It’s also unclear how the attackers managed to deliver the malware.

Malware 100

Malware Computers and Electronics Adware Cryptocurrency 100

Webroot

MAY 12, 2021

However, when examined more closely, most hosting IPs were found to have hosted malicious content (such as some serious malware ) in the past, and had connections to other high-risk IPs. Contextual graphs such as these show the relationships between web hosts and dropped malware. Mobile Threats. For instance, rojadirecta[.]me

Scams 114

Scams Mobile Social Engineering Advertising 114

SecureList

APRIL 27, 2021

In our initial report on Sunburst , we examined the method used by the malware to communicate with its C2 (command-and-control) server and the protocol used to upgrade victims for further exploitation. This campaign made use of a previously unknown malware family we dubbed FourteenHi.

Malware 138

Malware Spyware Government Social Engineering 138

SecureList

JULY 27, 2023

The most remarkable findings Early in June, we issued an early warning of a long-standing campaign that we track under the name Operation Triangulation , involving a previously unknown iOS malware platform distributed via zero-click iMessage exploits. Kaspersky employees were also affected by this threat.

Malware 84

Malware Government Phishing Social Engineering 84