Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call

Facebook has patched a bug in its widely installed Messenger app for Android that could have allowed a remote attacker to call unsuspecting targets and listen to them before even they picked up the audio call. The flaw was discovered and reported to Facebook by Natalie Silvanovich of Google's...

Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call

Facebook has patched a bug in its widely installed Messenger app for Android that could have allowed a remote attacker to call unsuspecting targets and listen to them before even they picked up the audio call. The flaw was discovered and reported to Facebook by Natalie Silvanovich of Google's...

A Facebook Messenger Flaw Could Have Let Hackers Listen In

The vulnerability was found through the company's bug bounty program, now in its tenth year...

Leaked database exposed login data of 100k hacked Facebook accounts

By Sudais Asif The leaked database was owned by cybercriminals who hacked Facebook accounts and used them for credit card and Bitcoin scams. This is a post from HackRead.com Read the original post: Leaked database exposed login data of 100k hacked Facebook accounts...

Exposed Database Reveals 100K+ Compromised Facebook Accounts

Researchers have uncovered a wide-ranging global scam targeting Facebook users, after finding an unsecured database used by fraudsters to store the usernames and passwords of at least 100,000 victims. Researchers said that the cybercriminals behind the scam were tricking Facebook victims into...

A Ransomware Gang Bought Facebook Ads to Troll Its Victim

Covid-19 research hacking, the Pentagon's Photoshop antics, and more of the week's top security news...

Spam and phishing in Q3 2020

Quarterly highlights Worming their way in: cybercriminal tricks of the trade These days, many companies distribute marketing newsletters via online platforms. In terms of capabilities, such platforms are quite diverse: they send out advertising and informational messages, harvest statistics for...

PowerPoint 2003/2007/2010 Silent Builder Exploit

The exploit allows you to convert EXE & JAR to .PPS its coded 100% from scratch and used by private method to assure a great stability and lasting FUD time. You are able to attach it to the most e-mail providers nowadays everyone uses Microsoft Office so it gives a huge chance of success. This...

Ragnar Locker Ransomware Gang Takes Out Facebook Ads in Key New Tactic

The Ragnar Locker ransomware group has decided to ratchet up the pressure on its latest high-profile victim, Italian liquor conglomerate Campari, by taking out Facebook ads threatening to release the 2TB of sensitive data it stole in a Nov. 3 attack – unless a $15 million ransom is paid in Bitcoi...

Ragnar Locker ransomware gang using Facebook ads to extort victims

By Deeba Ahmed Ragnar Locker ransomware gang has attacked multiple firms recently, but now it has taken extortion to the next level. This is a post from HackRead.com Read the original post: Ragnar Locker ransomware gang using Facebook ads to extort victims...

Ransomware Group Turns to Facebook Ads

Its bad enough that many ransomware gangs now have blogs where they publish data stolen from companies that refuse to make an extortion payment. Now, one crime group has started using hacked Facebook accounts to run ads publicly pressuring their ransomware victims into paying up. On the evening o...

Wireshark 3.2.x < 3.2.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.8 advisory. - In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic...

Wireshark 3.2.x < 3.2.8 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.2.8 advisory. - In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in...

Security fix for the ALT Linux 9 package wireshark version 3.2.8-alt1

3.2.8-alt1 built Nov. 6, 2020 Anton Farygin in task 261029 Nov. 3, 2020 Anton Farygin - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...

Security fix for the ALT Linux 10 package wireshark version 3.2.8-alt1

Nov. 3, 2020 Anton Farygin 3.2.8-alt1 - 3.2.8 - fixes: CVE-2020-28030 the GQUIC dissector could crash. CVE-2020-26575 the Facebook Zero Protocol aka FBZERO dissector could enter an infinite loop...

A week in security (October 26 – November 1)

We had a very busy week at Malwarebytes Labs. We offered advice on Googles patch for an actively exploited zero-day bug that affects Chrome users, our podcast talked about finding consumer value in Cybersecurity Awareness Month with Jamie Court, we provided guidance about keeping ransomware cash...

'Copyright Violation' Notices Lead to Facebook 2FA Bypass

Scammers have hatched a new way to attempt to bypass two-factor authentication 2FA protections on Facebook. Cybercriminals are sending bogus copyright-violation notices with the threat of taking pages down unless the user attempts to appeal. The first step in the “appeal?” The victim is asked to...

Facebook hidden profile data disclosure Exploit

This lets you gather a bunch of information, even if it is private. phone number, email, ip-address, birthday, etc. Material can automatically collect data and save, possible to connect a proxy list...

Researchers: Instagram, LinkedIn Vulnerable to Preview-Link RCE Security Woes

UPDATE Link previews in popular chat apps on iOS and Android are a firehose of security and privacy issues, researchers have found. At risk are Facebook Messenger, LINE, Slack, Twitter Direct Messages, Zoom and many others. In the case of Instagram and LinkedIn, it’s even possible to execute remo...

Facebook Hermes Out-of-Bounds Read Vulnerability

Facebook Hermes is a small and lightweight JavaScript engine , optimized for running React Native on Android . Facebook Hermes 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 Previous versions of the JavaScript interpreter have an out-of-bounds read vulnerability. An attacker could exploit this...