記事 サイバーセキュリティ テクノロジー

Warning for Android Users,New Hook Malware with RAT Capabilities Emerges

The threat actor behind the BlackRock and ERMAC Android banking trojans has uncovered yet another malware for rent called Hook which introduces new capabilities to access files that are stored in the devices and create a remote interactive session. Hook as a novel ERMAC fork which is advertised for sale for $7,000 per month while featuring all the capabilities of its predecessor. Remote Access Tooling (RAT) capabilities which joins ranks of families such as Octo and Hydra are capable of performing a full Device Take Over (DTO) and also complete a full fraud chain from PII exfiltration to transaction with help of all the intermediate steps that too without the […]

続きを読む
記事 サイバーセキュリティ テクノロジー

WhatsApp Fined €5.5 Million for Violating Data Protection Laws

The Irish Data Protection Commission imposed fresh fines of €5.5 million against Meta’s WhatsApp for violating data protection laws which was processing users’ personal information. Main point of focus of the ruling is an update to the messaging platform like whatsapp Terms of Service which was imposed in the days which leads enforcement of the General Data Protection Regulation in May 2018 which require users agree to the revised terms in order to continue using the service or risk losing access. This complaint is filed by privacy non-profit NOYB which alleged that WhatsApp breached the regulation by compelling its users to agree to the processing of their personal data for […]

続きを読む
記事 サイバーセキュリティ テクノロジー

Raccoon and Vidar Stealers Spreading through Massive Network of Fake Cracked Software

A resilient infrastructure comprising over 250 domains used to distribute information-stealing malware such as Raccoon and Vidar since early 2020. The infection chain uses about a hundred of fake cracked software catalogue websites which are redirect to several links before downloading the payload hosted on file share platforms such as GitHub.It led to distribution of information stealing software like raccoon and vidar The French cybersecurity company access the domains which are operated by a threat actor running a traffic direction system (TDS) that allows other cybercriminals to rent the service to distribute their malware.The attacks target users are searching for cracked versions of software and games on search engines like […]

続きを読む
記事 サイバーセキュリティ テクノロジー

Malware Attack on CircleCI Engineer’s Laptop

DevOps platform CircleCI disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company’s systems and data last month. The sophisticated attack took place in mid December 2022 and that the malware went undetected by its antivirus software led to malware attack on laptop of engineer of CircleCI. The malware was able to execute session cookie theft which enable them to impersonate the targeted employee in a remote location and then escalate access to a subset of our production systems. Analysis of the security lapse revealed that the unauthorized third-party pilfered data from a subset of its databases and […]

続きを読む
サイバーセキュリティ テクノロジー

Cisco warned for unpatched vulnurabilities in EoL Buisness routers

Cisco warned of two security vulnerabilities which affects end-of-life Small Business RV016, RV042, RV042G, and RV082 routers which will not be fixedaccording to them as it acknowledged the public availability of proof-of-concept exploit. The issues of cisco are present in the routers web-based management interface which enables a remote adversary to sidestep authentication which malicious commands on the underlying operating system. Severe of the two is CVE-2023-20025 (CVSS score: 9.0)is the result of improper validation of user input within incoming HTTP packetsA threat actor could misusing it by sending a specially crafted HTTP request to vulnerable routers’ web-based management interface to bypass authentication and obtain elevated permissions. The lack of […]

続きを読む
記事 サイバーセキュリティ テクノロジー 動画

クッキー法違反でTIKTOKに罰金

Popular short video making app TikTok has been fined about €5.4 million by the French data protection supervised agency for breaking cookie consent . Tiktok become the latest platform to face such penalties after Amazon, Google, Meta, and Microsoft since 2020.Users of tiktok have not refused cookies as easily as accepting them and they were not informed in a sufficiently more accurate way of the objectives of the different cookie.The regulator said that it has conducted several audits between May 2020 and June 2022. This company did not offer a straightforward option to refuse all cookies as opposed to just one click for accepting them. The option to “refuse all” […]

続きを読む
記事 サイバーセキュリティ テクノロジー 未分類

Twitter has denied leaking data rumors

Twitter has cleared that through investigation ,it doesnt found any users’ data sold online by hacking its systems. Based on investigations which are carried out by twitter no such evidence is found which shows hacking in its system and leaking of user’s data ,this is claimed by twitter. This comes forward because of multiple reports that shows Twitter data which is belongs to millions of users have been made on sale in some online criminals forums.They said no password has been sold and moreover any sort of suspision activity or multiple account user has been removed so that there will be ni data leakage of users and privacy of users […]

続きを読む
サイバーセキュリティ

U.K. Police Arrest 142 in Global Crackdown on ‘iSpoof’ Phone Spoofing Service

U.K. Police Arrest 142 in Global Crackdown on ‘iSpoof’ Phone Spoofing Service Cybersecurity is progressing and we can say this because a coordinated law enforcement effort has dismantled an online phone number spoofing service called iSpoof and arrested 142 individuals linked to the operation. The websites, ispoof[.]me and ispoof[.]cc, allowed the crooks to “impersonate trusted corporations or contacts to access sensitive information from victims,” Europol said in a press statement. Worldwide losses exceeded €115 million ($ 119.8 million), with over 200,000 potential victims believed to have been directly targeted through iSpoof in the U.K. alone, the Metropolitan Police noted. Among the 142 people arrested is the administrator of the website, […]

続きを読む
サイバーセキュリティ

Meta Reportedly Fires Dozens of Employees in 2022 for Hijacking Users’ Facebook and Instagram Accounts

Meta Reportedly Fires Dozens of Employees for Hijacking Users’ Facebook and Instagram Accounts Meta is the new hype these days. Education, the fashion industry etc are stepping into this world. But the new world i e, Meta is not safe from cyberattacks. Meta Platforms is said to have fired or disciplined over two dozen employees and contractors over the past year for allegedly compromising and taking over user accounts, The Wall Street Journal reported Thursday. Some of these cases involved bribery, the publication said, citing sources and documents. Included among those fired were contractors who worked as security guards at the social media firm’s facilities and were given access to […]

続きを読む
サイバーセキュリティ

Indian Entrepreneur Invited By US Vice President, Discusses Cyber Security

Indian Entrepreneur Invited By US Vice President, Discusses Cyber Security Indian tech entrepreneur Trishneet Arora has shared his vision to deal with the growing menace of cyber security with US Vice President Kamala Harris during aTrishneet Arora, the CEO of TAC Security, was invited by Kamala Harris to the gathering in Albuquerque, New Mexico. During the special gathering of young business leaders , “I am profusely honoured to have met the Vice President of the United States of America. She is empowering women across the world and stands as a strong inspiration for them,” Mr Arora said.Kamala Harris, 57, is the first woman, the first Black American, and the first […]

続きを読む