Collaborate Disseminate
Engineers from some of the world’s largest email service providers have banded together to improve the security of email traffic traversing the Internet.Devised by engineers from Google, Microsoft, Yahoo, Comcast, LinkedIn and 1&1 Mail & Med… Continue reading Google, Microsoft, Yahoo and others publish new email security standard
Engineers from some of the world’s largest email service providers have banded together to improve the security of email traffic traversing the Internet.Devised by engineers from Google, Microsoft, Yahoo, Comcast, LinkedIn and 1&1 Mail & Med… Continue reading Google, Microsoft, Yahoo and others publish new email security standard
Security researchers exploited previously unknown vulnerabilities in Apple Safari, Google Chrome and Flash Player to compromise the latest versions of OS X and Windows during the first day of the annual Pwn2Own hacking contest.On Wednesday, four tea… Continue reading Safari, Chrome and Flash Player hacked during first day at Pwn2Own, some of them twice
Security researchers exploited previously unknown vulnerabilities in Apple Safari, Google Chrome and Flash Player to compromise the latest versions of OS X and Windows during the first day of the annual Pwn2Own hacking contest.
On Wednesday, four t… Continue reading Safari, Chrome and Flash Player hacked during first day at Pwn2Own, some of them twice
A new email-based attack campaign is targeting key employees from companies in the U.S., Middle East and Asia with the goal of compromising their computers and email accounts.This type of attack is known as business email compromise (BEC) and involv… Continue reading Attack campaign uses keylogger to hijack key business email accounts
A new email-based attack campaign is targeting key employees from companies in the U.S., Middle East and Asia with the goal of compromising their computers and email accounts.This type of attack is known as business email compromise (BEC) and involv… Continue reading Attack campaign uses keylogger to hijack key business email accounts
Attackers are exploiting a weakness in Apple’s digital rights management technology to install malicious apps on supposedly protected, non-jailbroken iOS devices.In late February, security researchers from Palo Alto Networks found three malicious ap… Continue reading Attackers exploit Apple DRM weakness to infect non-jailbroken iOS devices
Attackers are exploiting a weakness in Apple’s digital rights management technology to install malicious apps on supposedly protected, non-jailbroken iOS devices.In late February, security researchers from Palo Alto Networks found three malicious ap… Continue reading Attackers exploit Apple DRM weakness to infect non-jailbroken iOS devices
An increasing number of cyberespionage groups are using stolen code-signing certificates to make their hacking tools and malware look like legitimate applications.
The latest example is a China-based hacker group that has launched targeted attacks against government and commercial organizations from around the world over the past two years.
The group’s activities were uncovered by researchers from Symantec in late 2015 when they detected a digitally signed hacking tool that was used in an attack against one of the company’s customers.
The tool, a Windows brute-force server message block (SMB) scanner, was signed with a digital certificate that belonged to a South Korean mobile software developer. This immediately raised red flags as a mobile software company would have no reason to sign such an application.
To read this article in full or to leave a comment, please click here
Continue reading Cyberespionage groups are stealing digital certificates to sign malware
An increasing number of cyberespionage groups are using stolen code-signing certificates to make their hacking tools and malware look like legitimate applications.
The latest example is a China-based hacker group that has launched targeted attacks against government and commercial organizations from around the world over the past two years.
The group’s activities were uncovered by researchers from Symantec in late 2015 when they detected a digitally signed hacking tool that was used in an attack against one of the company’s customers.
The tool, a Windows brute-force server message block (SMB) scanner, was signed with a digital certificate that belonged to a South Korean mobile software developer. This immediately raised red flags as a mobile software company would have no reason to sign such an application.
To read this article in full or to leave a comment, please click here
Continue reading Cyberespionage groups are stealing digital certificates to sign malware