Security Affairs

NOVEMBER 16, 2019

The popular messaging platform WhatsApp made the headlines again, a new bug could be exploited by hackers to secretly install spyware. According to the website The Hacker News, WhatsApp has recently fixed a critical vulnerability, tracked as CVE-2019-11931, that could have allowed attackers to remotely compromise targeted devices.

Spyware 111

Spyware Advertising Mobile Information Security 111

Security Affairs

JUNE 22, 2020

Researchers at Amnesty International collected evidence that a Moroccan journalist was targeted with network injection attacks using NSO Group ‘s spyware. ” The analysis of Omar Radi’s iPhone suggests network injection attacks took place on 27 th January, 11 th February, and 13 th of September 2019. .”

Spyware 144

Spyware Surveillance Mobile Advertising 144

Security Affairs

APRIL 25, 2020

Facebook advocates have challenged a plea from spyware maker NSO Group to dismiss the legal dispute over the hacking accusations, arguing it has immunity from prosecution. The surveillance implant used by the NSO group used an exploit for a vulnerability, tracked as CVE-2019-3568 , in the WhatsApp VoIP feature.

Spyware 133

Spyware Surveillance Advertising Mobile 133

CyberSecurity Insiders

JULY 19, 2021

Until the year 2019, it was offering the spying software only to government organizations that were indulging in espionage related tactics on criminals. software that led to iPhone hacks. The post Apple iPhones to get protection against Pegasus Mobile Spyware appeared first on Cybersecurity Insiders.

Spyware 145

Spyware Mobile Media Malware 145

eSecurity Planet

SEPTEMBER 14, 2021

Apple continues to be haunted by spyware developed by an Israeli security firm that hostile governments used to hack into Apple devices to spy on journalists, activists and world leaders (see Apple Security Under Scrutiny Amid Fallout from NSO Spyware Scandal ). Spyware Vulnerability. and iPadOS 14.8

Spyware 120

Spyware Mobile Engineering Government 120

Security Affairs

MAY 14, 2019

Facebook fixed a critical zero-day flaw in WhatsApp that has been exploited to remotely install spyware on phones by calling the targeted device. Facebook has recently patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568 , that has been exploited to remotely install spyware on phones by calling the targeted device.

Spyware 111

Spyware Surveillance Mobile Advertising 111

Security Affairs

MARCH 3, 2023

The phone of an opposition-linked Polish mayor was infected with the powerful Pegasus spyware, local media reported. Reuters reported that the phone of an opposition-linked Polish mayor was infected with the Pegasus spyware. According to rumors, the Polish special services are using surveillance software to spy on government opponents.

Spyware 98

Spyware Surveillance Hacking Government 98

Security Affairs

DECEMBER 21, 2020

Tens of Al Jazeera employees were targeted in a cyber espionage campaign leveraging a zero-click iOS zero-day vulnerability to hack their iPhones. Researchers from Citizen Lab reported that at least 36 Al Jazeera employees were targeted in a cyber espionage campaign leveraging a zero-click iOS zero-day vulnerability to hack their iPhones.

Hacking 142

Hacking Surveillance Spyware Government 142

Security Affairs

MARCH 5, 2020

China-linked cyber espionage groups increasingly targeted organizations in the telecommunications industry in 2019. “Analysis in 2019 revealed a focus by Chinese adversaries on the telecommunications sector, which could support both signals intelligence and further upstream targeting. SecurityAffairs – hacking, China).

Telecommunications 133

Telecommunications Advertising Mobile Government 133

Security Affairs

APRIL 19, 2022

Researchers from Citizen Lab have published a report detailing the use of a new zero-click iMessage exploit, dubbed HOMAGE, to install the NSO Group Pegasus spyware on iPhones belonging to Catalan politicians, journalists, academics, and activists. SecurityAffairs – hacking, NSO Group Pegasus). To nominate, please visit:?

Spyware 108

Spyware Surveillance Government Software 108

SecureWorld News

APRIL 12, 2022

The Israeli-based company—known for its Pegasus spyware that has been used to target journalists, politicians, and executives all over the world—was blacklisted by the United States government in November 2021. NSO denies involvement in EU hacking. in terms of spyware and is evaluating vendors like NSO.

Spyware 98

Spyware Government Surveillance Hacking 98

Security Affairs

OCTOBER 11, 2021

A Togolese human rights advocate was hit by mobile spyware that has been allegedly developed by an Indian firm called Innefu Labs. Experts believe the attackers used a spyware developed by an Indian company called Innefu Labs. In the past, the Donot Team spyware was found in attacks outside of South Asia. Pierluigi Paganini.

Spyware 102

Spyware Surveillance Accountability Mobile 102

Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country.

Spyware 106

Spyware Surveillance Telecommunications Mobile 106

Security Affairs

MARCH 13, 2019

One of the zero-day flaws ( CVE-2019-0797 ) patched this week by Microsoft has been exploited in targeted attacks by several threats groups, including FruityArmor and SandCat APT groups. “In addition to CVE-2019-0797 and CHAINSHOT , SandCat also uses the FinFisher /FinSpy framework.” Pierluigi Paganini.

Advertising 111

Advertising Spyware Hacking Government 111

Security Affairs

JULY 11, 2019

Malware researchers from Kaspersky have discovered new and improved versions of the infamous FinFisher spyware used to infect both Android and iOS devices. Experts at Kaspersky have discovered a new improved variant of the FinFisher spyware used to spy on both iOS and Android users in 20 countries. Pierluigi Paganini.

Spyware 111

Spyware Advertising Mobile Architecture 111

Security Affairs

MAY 29, 2023

Cisco Talos and the Citizen Lab researchers have published a technical analysis of the powerful Android spyware Predator. Security researchers at Cisco Talos and the Citizen Lab have shared technical details about a commercial Android spyware named Predator that is sold by the surveillance firm Intellexa (formerly known as Cytrox).

Spyware 98

Spyware Surveillance Media Malware 98

SecureWorld News

JULY 18, 2022

The controversial Pegasus spyware continues to stay in the news cycle, as a new report from the Citizen Lab details how the technology was used to target pro-democracy activists in Thailand. The increase in surveillance also means the use of Pegasus spyware. Pegasus spyware in Thailand. So, what is the situation in Thailand?

Spyware 98

Spyware Surveillance Government Hacking 98

Security Affairs

NOVEMBER 11, 2022

The threat actors behind the campaigns used two Android spyware to spy on the victims and steal sensitive information. The campaigns involved a new piece of malware called BadBazaar and new variants of the MOONSHINE surveillance software discovered by Citizen Lab in 2019 and employed in attacks against Tibetan activists. .

Surveillance 98

Surveillance Spyware Malware Mobile 98

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The binaries are obfuscated and do some checks to detect if the spyware is running in a Virtual Machine. SecurityAffairs – hacking, FinSpy). Pierluigi Paganini.

Spyware 145

Spyware Surveillance Advertising Mobile 145

Security Affairs

AUGUST 30, 2019

Google researchers discovered that iPhone devices could be hacked by tricking owners into visiting specially crafted websites. Researchers at Google Project Zero discovered that it was possible to hack iPhone devices by visiting specially crafted websites. — Ben Hawkes (@benhawkes) February 7, 2019. Apple iOS 12.1.4

Spyware 111

Spyware Hacking Advertising Encryption 111

Security Affairs

OCTOBER 5, 2020

A China-linked threat actor used UEFI malware based on code from Hacking Team in attacks aimed at organizations with an interest in North Korea. The experts were investigating several suspicious UEFI firmware images when discovered four components, some of which were borrowing the source code a Hacking Team spyware.

Firmware 145

Firmware Spyware Surveillance Hacking 145

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. CVE-2019-8605 internally referred to as SockPort2 and publicly known as SockPuppet CVE-2020-3837 internally referred to and publicly known as TimeWaste. SecurityAffairs – hacking, RCS Labs).

Surveillance 136

Surveillance Mobile Spyware Telecommunications 136

Security Affairs

OCTOBER 14, 2020

The authorities started the investigation last year after the German blog Netzpolitik and some advocacy groups (Reporters Without Borders, Society for Freedom Rights, and the European Center for Constitutional and Human Rights), filed a complaint with Munich prosecutors in the summer of 2019. SecurityAffairs – hacking, K-Electric).

Surveillance 128

Surveillance Spyware Advertising Software 128

Krebs on Security

NOVEMBER 13, 2019

That user pointed to a March 2019 media advisory released by the Australian Federal Police , who said they’d executed search warrants there as part of an investigation into RAT technology conducted in tandem with the RCMP. net, the forum where Revesz principally advertised his software.

Malware 226

Malware Advertising Marketing System Administration 226

Security Affairs

SEPTEMBER 12, 2019

“The main Simjacker attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone, which then instructs the SIM Card within the phone to ‘take over’ the mobile phone to retrieve and perform sensitive commands.” SecurityAffairs – SimJacker, hacking). ” continues the post.

Hacking 112

Hacking Mobile Spyware Manufacturing 112

Security Affairs

APRIL 13, 2022

One of the officials targeted with the infamous spyware there is Didier Reynders, a senior Belgian statesman who has served as the European Justice Commissioner since 2019. The Pegasus spyware used the ForcedEntry zero-day exploit to compromise the recipients’ devices without their interaction. To nominate, please visit:?

Surveillance 104

Surveillance Software Spyware Hacking 104

Security Affairs

APRIL 20, 2025

BPFDoors Hidden Controller Used Against Asia, Middle East Targets Gorilla, a newly discovered Android malware Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia * Unmasking the new XorDDoS controller and infrastructure ** Byte Bandits: (..)

Data breaches 61

Data breaches Malware Phishing Hacking 61

Security Affairs

SEPTEMBER 18, 2020

Every third email, meanwhile, contained spyware , which is used by threat actors to steal payment data or other sensitive info to then put it on sale in the darknet or blackmail its owner. Another 17 percent contained downloaders, while backdoors and banking Trojans came third with a 16- and 15-percent shares, respectively.

Phishing 136

Phishing Ransomware Spyware Banking 136

Security Affairs

FEBRUARY 6, 2022

One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream. Apple addressed the flaw used by the ForcedEntry exploit in September 2021, rendering both NSO and QuaDream’s spyware ineffective.

Surveillance 98

Surveillance Spyware Government Hacking 98

Security Affairs

APRIL 8, 2020

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. In May, Facebook has patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568 , that has been exploited to remotely install spyware on phones by calling the targeted device.

Surveillance 136

Surveillance Spyware Advertising Government 136

Security Affairs

APRIL 9, 2020

Spyware turned out to be the most common malware class hiding in fraudulent COVID-19 emails, with AgentTesla topping the list of phishers’ favorite strains. Spyware: the most likely COVID-19 payload. Most COVID-19-related phishing emails analyzed had different spyware strains embedded as attachments. Source: CERT-GIB.

Phishing 142

Phishing Malware Spyware DDOS 142

Security Affairs

OCTOBER 19, 2020

Researchers spotted new variants of the Windows GravityRAT spyware that now can also infect Android and macOS devices. The malware researchers found the new Android GravityRAT sample in 2019, on VirusTotal. SecurityAffairs – hacking, GravityRAT ). Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 138

Malware Computers and Electronics Spyware Advertising 138

Security Affairs

MAY 20, 2019

Amnesty International filed a lawsuit against Israeli surveillance firm NSO and fears its staff may be targeted by the company with its Pegasus spyware. In July, Citizen Lab collected evidence of attacks against 175 targets worldwide carried on with the NSO spyware. ” reads the post published by The Guardian.

Surveillance 106

Surveillance Spyware Software Government 106

Security Affairs

APRIL 28, 2020

In 2019, researchers from Dr. Web discovered a backdoor trojan in Google Play, which appeared different from other threats due to its level of sophistication for this reason Kaspersky investigated it. . “One of the latest samples was published on the official Android market on November 6, 2019. Pierluigi Paganini.

Malware 141

Malware Advertising Marketing Hacking 141

Security Affairs

APRIL 11, 2021

The fight to the Joker malware (aka Bread) begun in September 2019 when security experts at Google removed from the official Play Store 24 apps because they were infected with a new spyware tracked as “ the Joker. ”. SecurityAffairs – hacking, Huawei apps). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Malware 145

Malware Spyware Mobile Antivirus 145

Security Affairs

JULY 16, 2021

The spyware is able to steal SMS messages, contact lists, and device information and to sign victims up for premium service subscriptions. Since 2019 experts found many Joker apps on Google Play store, in September 2019 security experts at Google removed from the store 24 apps. SecurityAffairs – hacking, Joker malware).

Malware 145

Malware Mobile Spyware Encryption 145

Security Affairs

APRIL 21, 2020

To do this, the spyware creates different threads and timer functions in the main function. “However, these campaigns seem to deliver the Agent Tesla spyware Trojan instead, and beyond just the oil & gas sector, they also target other energy verticals that have been tagged as critical during this Coronavirus pandemic.”

Spyware 136

Spyware Manufacturing Malware Engineering 136