eSecurity Planet

FEBRUARY 22, 2022

There is no need for social engineering , as the program can implant backdoors directly without forced consent. NSO Group’s Pegasus software has been routinely in the headlines in recent years for using zero-click attacks to install its spyware. Spyware and Zero-Days: A Troubling Market.

Spyware 125

Spyware Software Government Social Engineering 125

SecureList

MAY 27, 2022

MoonBounce: the dark side of UEFI firmware. Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). The attackers study their victims carefully and use the information they find to frame social engineering attacks.

Phishing 133

Phishing Spyware Firmware Malware 133

SecureList

NOVEMBER 30, 2021

In November, Apple announced that it was taking legal action against NSO Group for developing software that targets its users with “malicious malware and spyware” Detecting infection traces from Pegasus and other advanced mobile malware is very tricky, and complicated by the security features of modern OSs such as iOS and Android.

Malware 139

Malware Mobile Spyware Surveillance 139

SecureList

NOVEMBER 18, 2022

In July, we reported a rootkit that we found in modified Unified Extensible Firmware Interface (UEFI) firmware, the code that loads and initiates the boot process when the computer is turned on. The group delivers its malware using social engineering. Mobile statistics. Targeted attacks.

Malware 122

Malware Computers and Electronics Adware Cryptocurrency 122

SecureList

MARCH 1, 2021

In their campaigns to infect mobile devices, cybercriminals always resort to social engineering tools, the most common of these passing a malicious application off as another, popular and desirable one. The manufacturer of the mobile device preloads an adware application or a component with the firmware. Trends of the year.

Mobile 145

Mobile Malware Adware Banking 145

SecureList

NOVEMBER 14, 2023

In May, Ars Technica reported that BootGuard private keys had been stolen following a ransomware attack on Micro-Star International (MSI) in March this year (firmware on PCs with Intel chips and BootGuard enabled will only run if it is digitally signed using the appropriate keys).

Hacking 141

Hacking Energy and Utilities Media Malware 141

Digital Shadows

NOVEMBER 10, 2022

Threat actors can develop fake mobile apps to install adware, steal PII and financial data, extract cookies and credentials, and download further payloads (such as spyware) from a remote-controlled domain. 100% NOT a pyramid scheme Social media pages are not the only concern when it comes to brand and logo theft.

Cyber threats 52

Cyber threats Media Social Engineering Mobile 52