Opsec Cyber Malware Archives - Page 5 of 35

Category Archives: Malware

S3 Ep129: When spyware arrives from someone you trust

April 6 2023 By Paul Ducklin in Malware, Podcast, Privacy, Security

Scanning tools, supply-chain malware, Wi-Fi hacking, and why there should be TWO World Backup Days... listen now!

North Korea Hacking Cryptocurrency Sites with 3CX Exploit

April 4 2023 By Bruce Schneier in cybersecurity, Malware, Security, vulnerabilities

Researchers at Russian cybersecurity firm Kaspersky today revealed that they identified a small number of cryptocurrency-focused firms as at least some of the victims of the 3CX software...
Read more

Supply chain blunder puts 3CX telephone app users at risk

March 31 2023 By Paul Ducklin in Malware, Security

Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into.

US Citizen Hacked by Spyware

March 21 2023 By Bruce Schneier in Malware, Security

The New York Times is reporting that a US citizen’s phone was hacked by the Predator spyware.

A U.S. and Greek national who worked on Meta’s security and trust...
Read more

Another Malware with Persistence

March 10 2023 By Bruce Schneier in China, Malware, Security

Here’s a piece of Chinese malware that infects SonicWall security appliances and survives firmware updates.

On Thursday, security firm Mandiant published a report that said threat actors with...
Read more

BlackLotus Malware Hijacks Windows Secure Boot Process

March 8 2023 By Bruce Schneier in Malware, Security

Researchers have discovered malware that “can hijack a computer’s boot process even when Secure Boot and other advanced protections are enabled and running on fully updated versions of...

LastPass: Keylogger on home PC led to cracked corporate password vault

February 28 2023 By Paul Ducklin in Breach, Malware, Security

Seems the crooks implanted a keylogger via a vulnerable media app (LastPass politely didn't say which one!) on a developer's home computer.

Beware rogue 2FA apps in App Store and Google Play – don’t get hacked!

February 27 2023 By Paul Ducklin in Cryptography, Malware, Security

Even in Apple's and Google's "walled gardens", there are plenty of 2FA apps that are either dangerously incompetent, or unrepentantly malicious. (Or perhaps both.)