Tag Archives: Yandex

Scammers use Chrome, Firefox extensions in widespread ad fraud campaign

Posted on by

Security experts at Microsoft on Thursday detailed how internet attackers are abusing some of the world’s most popular web browsers for a fraud campaign, which at its height has affected more than 30,000 devices per day. The scammers are using malicious browser extensions— a tried and tested fraud tactic — to inject bogus advertisements into the results displayed on a search engine page. The more users who visit the fraudulent ad pages, the more money the perpetrators earn via a traffic-driven advertising program. Microsoft did not identify who was responsible for the attacks, or how much money they had netted. The malicious campaign, which Microsoft said began in May, uses extensions on popular web browsers like Google Chrome, Mozilla Firefox, Microsoft Edge and Russian-language Yandex to reach as many internet users as possible. “[T]he fact that this campaign utilizes a piece of malware that affects multiple browsers is an indication of how […]

The post Scammers use Chrome, Firefox extensions in widespread ad fraud campaign appeared first on CyberScoop.

Continue reading Scammers use Chrome, Firefox extensions in widespread ad fraud campaign→

Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges

Posted on by

An academic study found Microsoft’s Edge browser to be the least private, due to it sending device identifiers and web browsing pages to back-end servers. Continue reading Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges→

Google Analytics Emerges as a Phishing Tool

Posted on by

Web analytics help phishers hone their attacks — but website defenders can also use these tactics to better detect the scope of attacks and mitigate their effects. Continue reading Google Analytics Emerges as a Phishing Tool→

Facebook gave Amazon, Netflix, Spotify & others access to private user data

Posted on by

By Waqas
Facebook allowed Netflix, Spotify, Amazon, Microsoft, Yandex and Royal Bank of Canada unprecedented access to its users’ private data. The social media giant Facebook has been making headlines for all the wrong reasons lately. Now, accor… Continue reading Facebook gave Amazon, Netflix, Spotify & others access to private user data→

‘Man-in-the-disk’ attack took advantage of Android data security flaws

Posted on by

Several major mobile app developers including Google, Yandex and Xiaomi left numerous Android apps vulnerable to a so-called “Man-in-the-Disk” intrusion, a potent attack surface for Android apps that can potentially allow silent installation of malicious apps, according to researchers at Israeli cybersecurity firm Check Point. Researchers were able to compromise files and crash Google Translate, Google Voice-to-Text and Yandex Translate because the apps failed to validate the integrity of data used from Android’s External Storage System. Google acknowledged and fixed those applications and are in the process of fixing other vulnerable apps, Check Point said. Google did not respond to a request for comment. The “Man-in-the-Disk” attack surface allows a hacker to interfere with an Android app’s data stored in External Storage, the operating system’s type of storage typically used to share data between applications — for instance, a messenger using a photo from a camera app. The intrusion’s name […]

The post ‘Man-in-the-disk’ attack took advantage of Android data security flaws appeared first on Cyberscoop.

Continue reading ‘Man-in-the-disk’ attack took advantage of Android data security flaws→