Collaborate Disseminate
A Virgin Mobile-branded phone distributed by Assurance Wireless to low-income U.S. citizens has a trojan pre-installed that can download additional malware. Continue reading Lifeline Assistance Phone Users Targeted with ‘Uninstallable’ Adware
Researchers say that physically disruptive attacks aren’t imminent, but an increased focus on U.S. electrical-grid operators doesn’t bode well. Continue reading Oil-and-Gas Specialist APT Pivots to U.S. Power Plants
Users of GnuPG, OpenSSL and Git could be in danger from an attack that’s practical for ordinary attackers to carry out. Continue reading Exploit Fully Breaks SHA-1, Lowers the Attack Bar
The PowerTrick backdoor, which fetched yet other backdoors, is designed to help TrickBot evade detection. Continue reading TrickBot Adds Custom, Stealthy Backdoor to its Arsenal
Project Zero vulnerability disclosures will now happen at 90 days, even if a patch becomes available before then. Continue reading Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy
The case highlights the rising issue of stalkerware, which has reached epidemic proportions. Continue reading Liverpool Voyeur Used IM-RAT to Video Women at Home
Researchers suspect the cybercriminals attacked using an unpatched critical vulnerability in the company’s seven Pulse Secure VPN servers. Continue reading Sodinokibi Ransomware Behind Travelex Fiasco: Report
It’s unclear yet whether the Cupertino giant will assist, given past history of court battles over such incidents. Continue reading FBI Taps Apple to Unlock Pensacola Shooter’s iPhone
The latest attack takes aim at a vertical-specific e-commerce platform. Continue reading Magecart Hits Parents and Students via Blue Bear Attack
One threat actor appears to be behind several ongoing, related campaigns. Continue reading DeathRansom Campaign Linked to Malware Cornucopia