Security Boulevard

FEBRUARY 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Google's reCAPTCHA is not only useless, it's also basically spyware Techspot This study demonstrates Google's reCAPTCHA v2 and v3 are flawed and don't actually keep out bots. Tips for finding old accounts.

Surveillance 52

Surveillance Data breaches VPN Malware 52

SecureWorld News

DECEMBER 23, 2020

Pegasus spyware is a phone surveillance solution that enables customers to remotely exploit and monitor devices. The company sells its surveillance technology to governments around the world. And watchdog groups say its products are often found to be used in surveillance abuses. Spyware attacks becoming harder to detect.

Spyware 54

Spyware Surveillance Hacking Media 54

Security Boulevard

FEBRUARY 10, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Privacy Services Mullvad VPN for Windows on ARM is here! Mullvad Mullvad VPN client is now available for Windows ARM desktops. this is certainly a news item worth paying attention to.

Spyware 52

Spyware Surveillance Government Data breaches 52

eSecurity Planet

OCTOBER 21, 2022

From facial recognition to surveillance cameras to time trackers or just having a couple guys standing over employees’ shoulders, there are a multitude of ways to make sure employees are staying on-task and being productive. Check Out Secure Access for Remote Workers: RDP, VPN & VDI. What is Employee Monitoring and Why Use It?

Computers and Electronics 127

Computers and Electronics Surveillance Software Manufacturing 127

SecureList

NOVEMBER 14, 2022

The cyber-offense ecosystem still appears to be shaken by the sudden demise of NSO Group; at the same time, these activities indicate to us that we’ve only seen the tip of the iceberg when it comes to commercial-grade mobile surveillance tooling. One of the major cyber-incidents of 2022 took place early this year: the Okta hack.

Firmware 127

Firmware Surveillance Mobile Telecommunications 127

eSecurity Planet

MARCH 27, 2023

Targeting Firewalls and IPS/IDS Appliances In the case of CVE-2022-42475, a flaw in Fortinet’s FortiOS SSL-VPN, Mandiant observed a Chinese state-sponsored group exploiting the vulnerability in late 2022. firewalls, IPS/IDS appliances, etc.),” the researchers wrote.

Firewall 104

Firewall Internet Internet Telecommunications 104

SecureList

APRIL 27, 2021

During routine monitoring of detections for FinFisher spyware tools, we discovered traces that point to recent FinFly Web deployments. The attackers used vulnerabilities in an SSL-VPN product to deploy a multi-layered loader we dubbed Ecipekac (aka DESLoader, SigLoader and HEAVYHAND).

Malware 145

Malware Government Spyware Social Engineering 145

Pen Test Partners

MAY 26, 2025

Our investigation revealed spyware with call-forwarding and banking credential capture, likely installed via custom firmware on the device. We traced the entry to an outdated Ivanti VPN, correlated DNS to malware domains (like iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com), and observed 7zip activity linked to data staging.

Banking 64

Banking VPN Ransomware Scams 64

SecureList

JUNE 3, 2024

This RAT allows an attacker to surveil and harvest sensitive data from a target computer. Sample artifacts suggest that this version (V10, according to the attackers’ versioning system) may have started operating in 2022, although the first known Linux variant (V7), which has still not been publicly described, dates back to 2021.

Banking 116

Banking Malware Computers and Electronics Mobile 116

SecureList

NOVEMBER 17, 2021

The Israeli Defense Forces (IDF) have claimed that threat actors have been using catfishing to lure Israeli soldiers into installing spyware. When we wrote this prediction, we were mainly thinking about a continuation of all the malicious activities targeting VPN appliances. But this prediction also came true another way.

Mobile 145

Mobile Surveillance Ransomware Government 145

SecureList

OCTOBER 26, 2021

On June 3, Check Point published a report about an ongoing surveillance operation targeting a Southeast Asian government, and attributed the malicious activities to a Chinese-speaking threat actor named SharpPanda. The samples we analyzed mimicked various applications such as private messaging, VPN, and media services.

Malware 145

Malware Government Surveillance Spyware 145