Collaborate Disseminate
Attackers are getting creative, using smishing & a malicious Google Play QR reader to plant banking trojans on the phones of victims across the globe.
Continue reading Threat Actors Blanket Androids with Flubot, Teabot Campaigns
A pro-democracy Hong Kong site was used to launch watering-hole attacks that planted a powerful macOS backdoor that researchers dubbed DazzleSpy.
Continue reading New MacOS Malware ‘DazzleSpy’ Used in Watering-Hole Attacks
Researchers identify three new versions of the banking trojan that include various new features, including GPS tracking and novel obfuscation techniques. Continue reading BRATA Android Trojan Updated with ‘Kill Switch’ that Wipes Devices
QR codes have become a go-to staple for contactless transactions of all sorts during the pandemic, and the FBI is warning cybercriminals are capitalizing on their lax security to steal data and money, and drop malware. Continue reading Surge in Malicious QR Codes Sparks FBI Alert
What attracts the attackers? David “moose” Wolpoff, CTO at Randori, discusses how to evaluate your infrastructure for juicy targets. Continue reading The Internet’s Most Tempting Targets
The information-disclosure issue, affecting Macs, iPhones and iPads, allows a snooping website to find out information about other tabs a user might have open. Continue reading Pervasive Apple Safari Bug Exposes Web-Browsing Data, Google IDs
A security bug in the file-sharing cloud app could have allowed attackers using stolen credentials to skate by one-time SMS code verification requirements. Continue reading Box 2FA Bypass Opens User Accounts to Attack
Attackers can access audio and files uploaded to the MY2022 mobile app required for use by all winter games attendees – including personal health details.
Continue reading Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks
Zoho’s comprehensive endpoint-management platform suffers from an authentication-bypass bug (CVE-2021-44757) that could lead to remote code execution. Continue reading Critical ManageEngine Desktop Server Bug Opens Orgs to Malware