Remote Safe Mode attack defeats Windows 10 pass-the-hash defenses

Microsoft tries to protect user account credentials from theft in Windows 10 Enterprise, and security products detect attempts to pilfer user passwords. But all those efforts can be undone by Safe Mode, according to security researchers.

The Safe Mode is an OS diagnostic mode of operation that has existed since Windows 95. It can be activated at boot time and only loads the minimal set of services and drivers that Windows requires to run.

This means that most third-party software, including security products, don’t start in Safe Mode, negating the protection they otherwise offer. In addition, there are also Windows optional features like the Virtual Secure Module (VSM), which don’t run in this mode.

To read this article in full or to leave a comment, please click here

Continue reading Remote Safe Mode attack defeats Windows 10 pass-the-hash defenses→

Posted in Uncategorized

Pokémon Go guide app with half a million downloads hacks Android devices

Security researchers have found a malicious application on Google Play that had over 500,000 downloads and was designed to gain complete control over Android devices.

The application masqueraded as a guide for the popular Pokémon Go game and used multiple layers of obfuscation to bypass Google Play’s malware detection mechanisms, researchers from Kaspersky Lab said in a blog post.

The app contains a malicious module that doesn’t execute immediately. Instead, the app waits for another application to be installed or uninstalled in order to determine if it’s running on a real device or in an emulated environment, like the ones used to detect malware.

To read this article in full or to leave a comment, please click here

Continue reading Pokémon Go guide app with half a million downloads hacks Android devices→

Posted in Uncategorized

Pokémon Go guide app with half a million downloads hacks Android devices

Security researchers have found a malicious application on Google Play that had over 500,000 downloads and was designed to gain complete control over Android devices.

The application masqueraded as a guide for the popular Pokémon Go game and used multiple layers of obfuscation to bypass Google Play’s malware detection mechanisms, researchers from Kaspersky Lab said in a blog post.

The app contains a malicious module that doesn’t execute immediately. Instead, the app waits for another application to be installed or uninstalled in order to determine if it’s running on a real device or in an emulated environment, like the ones used to detect malware.

To read this article in full or to leave a comment, please click here

Continue reading Pokémon Go guide app with half a million downloads hacks Android devices→

Posted in Uncategorized