Firmware Marketing Spyware 
eSecurity Planet
FEBRUARY 22, 2022
NSO Group’s Pegasus software has been routinely in the headlines in recent years for using zero-click attacks to install its spyware. Spyware and Zero-Days: A Troubling Market. It can even access the chip’s firmware to gain root access on the device, a significant privilege escalation.
SecureList
MAY 27, 2022
MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). One of the things you can do to protect yourself from advanced mobile spyware is to reboot your device on a daily basis.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
SecureList
MARCH 20, 2024
Instead, it is a full-fledged spyware application that collects SMS messages, keystrokes, etc. Their products were primarily intended for the Russian market. The same malware earlier had been found in the firmware of a kids’ smart watch by an Israeli manufacturer distributed mainly in Europe and the Middle East.
Security Affairs
SEPTEMBER 14, 2024
CISA adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog Electronic payment gateway Slim CD disclosed a data breach impacting 1.7M
SecureList
NOVEMBER 14, 2022
In 2022, the GReAT team tracked several threat actors leveraging SilentBreak’s toolset as well as a commercial Android spyware we named MagicKarakurt. Such discoveries usually lead to massive and indiscriminate exploitation, and compromised machines are sold on dark markets to secondary buyers for the purposes of ransomware deployment.
SecureWorld News
AUGUST 8, 2022
Cybercriminals often use malware to gain access to a computer or mobile device to deploy viruses, worms, Trojans, ransomware, spyware, and rootkits. Remcos Remcos is marketed as a legitimate software tool for remote management and penetration testing. Qakbot can also be used to form botnets. Enforce MFA. Maintain offline (i.e.,
Pen Test Partners
JANUARY 14, 2025
This tool allows attackers to leverage the weaknesses in the MediaTek chipsets to perform firmware alterations on the device. This means they can potentially alter the firmware on the device. From a technical perspective, altering the IMEI requires access to certain low-level functions of the phone’s hardware and firmware.
Expert insights. Personalized for you.
125 
Let's personalize your content