article thumbnail

SandStrike Spyware Uses VPN App to Infect Android Devices

Heimadal Security

A newly discovered spyware is affecting more and more Android devices. Threat actors have become quite keen on SandStrike, spyware that they deliver via a malicious VPN app. The post SandStrike Spyware Uses VPN App to Infect Android Devices appeared first on Heimdal Security Blog. How SandStrike Works?

Spyware 103
article thumbnail

Espionage campaign loads VPN spyware on Android devices via social media

CSO Magazine

A new espionage campaign, dubbed SandStrike, has been detected using malicious VPN apps to load spyware on Android devices, cybersecurity company Kaspersky reports. To read this article in full, please click here

Spyware 117
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Spyware posing as VPN apps – Week in security with Tony Anscombe

We Live Security

The post Spyware posing as VPN apps – Week in security with Tony Anscombe appeared first on WeLiveSecurity. The Bahamut APT group distributes at least eight malicious apps that pilfer victims' data and monitor their messages and conversations.

Spyware 108
article thumbnail

Uyghurs Targeted With Spyware, Courtesy of PRC

Dark Reading

Chinese government employs spyware to detect so-called "pre-crimes" including using a VPN, religious apps, or WhatsApp, new analysis reveals.

Spyware 129
article thumbnail

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Security Affairs

Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware. ” reads the advisory.

VPN 125
article thumbnail

Experts Warn of SandStrike Android Spyware Infecting Devices via Malicious VPN App

The Hacker News

A previously undocumented Android spyware campaign has been found striking Persian-speaking individuals by masquerading as a seemingly harmless VPN application. Russian cybersecurity firm Kaspersky is tracking the campaign under the moniker SandStrike. It has not been attributed to any particular threat group.

Spyware 97
article thumbnail

Major Hotel Group Leaks 1TB of Customer Data

Adam Levin

Our team was able to access this server because it was completely unsecured and unencrypted,” announced VPN review website vpnMentor in a blog article describing their findings. . The personally identifiable information of children was included in several of the records.

B2B 295