2023 Firmware Spyware 
Security Affairs
JUNE 7, 2023
June 2023 security update for Android released by Google fixes about fifty flaws, including an Arm Mali GPU bug exploited by surveillance firms in their spyware. The June 2023 Android Security Bulletin provides details about the fix for more than fifty vulnerabilities affecting Android devices. In early April, U.S.
SecureList
NOVEMBER 14, 2022
We polled our experts from the GReAT team and have gathered a small number of key insights about what APT actors are likely to focus on in 2023. In 2022, the GReAT team tracked several threat actors leveraging SilentBreak’s toolset as well as a commercial Android spyware we named MagicKarakurt. What we predicted in 2022.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
MARCH 29, 2023
Google’s Threat Analysis Group (TAG) discovered several exploit chains targeting Android, iOS, and Chrome to install commercial spyware. The exploit chains were used to install commercial spyware and malicious apps on targets’ devices. The experts pointed out that both campaigns were limited and highly targeted.
SecureList
MARCH 20, 2024
In 2023 , our technologies blocked 33.8 One of 2023’s most resonant attacks was Operation Triangulation , targeting iOS, but that was rather a unique case. Instead, it is a full-fledged spyware application that collects SMS messages, keystrokes, etc. Conclusion In 2023, we detected more than 1.3
Security Affairs
DECEMBER 28, 2023
In June, Kaspersky announced that after a six-month-long investigation, they completed the collection of all the components of the attack chain and the analysis of the spyware implant, tracked as TriangleDB. The spyware is directly deployed in memory, but if the victim reboots the device the malware doesn’t persist.
SecureList
DECEMBER 27, 2023
Today, on December 27, 2023, we ( Boris Larin , Leonid Bezvershenko , and Georgy Kucherin ) delivered a presentation, titled, “Operation Triangulation: What You Get When Attack iPhones of Researchers”, at the 37th Chaos Communication Congress (37C3), held at Congress Center Hamburg. This was mitigated as CVE-2023-38606.
SecureList
JUNE 3, 2024
In late December, in a presentation at the 37th Chaos Communication Congress (37C3), experts from our Global Research and Analysis Team (GReAT) described the attack chain in detail , including – for the first time – how the attackers exploited the CVE-2023-38606 hardware vulnerability. You can read the full analysis here.
Expert insights. Personalized for you.
98 
Let's personalize your content