Remove Download Remove Firmware Remove Spyware
article thumbnail

Update now! Google Pixel vulnerability is under active exploitation

Malwarebytes

Google has notified Pixel users about an actively exploited vulnerability in their phones’ firmware. Firmware is the code or program which is embedded into hardware devices. This could mean that the discovered attacks were very targeted, for example by state-sponsored actors or industry-grade spyware.

Firmware 141
article thumbnail

Privacy Roundup: Week 12 of Year 2025

Security Boulevard

Researchers name several countries as potential Paragon spyware customers TechCrunch The Citizen Lab, a group of academics and security researchers, recently published a report indicating the governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore are "likely" customers of Israeli spyware maker Paragon Solutions.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

MoonBounce UEFI implant spotted in a targeted APT41 attack

Security Affairs

At the end of 2021, researchers discovered a UEFI firmware-level compromise by analyzing logs from its Firmware Scanner. Threat actors compromised a single component within the firmware image to intercept the original execution flow of the machine’s boot sequence and inject the sophisticated implant. Pierluigi Paganini.

Firmware 145
article thumbnail

IT threat evolution Q1 2022

SecureList

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). When opened, this document eventually downloads a backdoor. Targeted attacks. Other malware.

Phishing 134
article thumbnail

Android malware, Android malware and more Android malware

SecureList

Instead, it is a full-fledged spyware application that collects SMS messages, keystrokes, etc. The same malware earlier had been found in the firmware of a kids’ smart watch by an Israeli manufacturer distributed mainly in Europe and the Middle East. Tambir Tambir is an Android backdoor that targets users in Turkey. DsSdk module.

Malware 129
article thumbnail

Operation Triangulation attacks relied on an undocumented hardware feature

Security Affairs

Kaspersky initially reported that the exploit used in the attack downloads multiple subsequent stages from the C2 server, including additional exploits for privilege escalation. The final payload is downloaded from the same C2 and is described by Kaspersky as a fully-featured APT platform. However, attackers can extend this period.

Spyware 139
article thumbnail

Privacy Roundup: Week 11 of Year 2025

Security Boulevard

Vulnerabilities and Malware Primarily includes severe and exploited vulnerabilities in devices or software used by end users (ex: a major router firmware flaw). According to Lookout, these nation-state threat actors also tricked some users into downloading KoSpy in likely targeted attacks.