-
Giving a Face to the Malware Proxy Service ‘Faceless’
PRIVACY PRIVACY For the past seven years, a malware-based proxy service known as “Faceless” has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised on the service. In this post we’ll examine clues left behind over the…
-
Extortion Fraud is Still on the Rise
PRIVACY PRIVACY Authored by Lakshya Mathur and Sriram P McAfee Intelligence observed a huge spike in extortion email frauds over the past month. The intent of these fraudulent activities is to intimidate individuals into paying a specified amount of money as a ransom. Figure 1 shows the number of blackmail emails received over a month recently. …
-
Hard-to-detect malware loader distributed via AI-generated YouTube videos
PRIVACY PRIVACY Security researchers warn of a new malware loader that’s used as part of the infection chain for the Aurora information stealer. The loader uses anti-virtual-machine (VM) and unusual compilation techniques that seem to make it quite successful at avoiding detection by security solutions. The Aurora infostealer is written in Go and is operated…
-
App cyberattacks jump 137%, with healthcare, manufacturing hit hard, Akamai says
PRIVACY PRIVACY An analysis of customer data collected by content delivery network and internet services giant Akamai found that attacks targeting web applications rose by 137% over the course of last year, as the healthcare and manufacturing sectors in particular were targeted with an array of API and application-based intrusions. Local file intrusions — in…
-
Goldoson Malware Found in Dozens of Google Play Store Apps
PRIVACY PRIVACY The malicious software library can collect installed app lists, Wi-Fi and Bluetooth data, and more Read More
-
SpinOne adds new capabilities to secure SaaS applications and data
PRIVACY PRIVACY SaaS data protection provider Spin.ai has launched two new service modules — SaaS security posture management (SSPM) and SaaS data leak prevention/loss protection (SDLP) — along with a few new capabilities for existing modules, to its flagship SaaS security platform SpinOne. The enhancements to the SaaS-based offering aim to protect SaaS applications, automate…
-
MuddyWater Uses SimpleHelp to Target Critical Infrastructure Firms
PRIVACY PRIVACY A new advisory by Group-IB suggests the software used as part of these attacks is not compromised Read More
-
NSO Group’s Pegasus Spyware Found on High-Risk iPhones
PRIVACY PRIVACY The findings by Jamf suggest the observed attacks are highly targeted Read More
-
Daon’s TrustX to offer SaaS-based, no-code identity journeys
PRIVACY PRIVACY Identity and access management provider Daon has launched a SaaS-based identity proofing and authentication platform TrustX, designed to help customers create and manage user identity journeys across organizational workflows. The fully managed offering will use artificial intelligence (AI) and machine learning (ML) tools to support identity journeys, which will include building, verifying, and authenticating…
-
Army helicopter crash blamed on skipped software patch
PRIVACY PRIVACY The emergency ditching of an Australian military helicopter in the water just off a beach in New South Wales, has been blamed on the failure to apply a software patch. Read more in my article on the Hot for Security blog. Read More