Ztorg: from rooting to SMS

I've been monitoring Google Play Store for new Ztorg Trojans since September 2016, and have so far found several dozen new malicious apps. All of them were rooting malware that used exploits to gain root rights on the infected device. Then, in the second half of May 2017 I found one that wasn't...

Dvmap: the first Android malware with code injection

In April 2017 we started observing new rooting malware being distributed through the Google Play Store. Unlike other rooting malware, this Trojan not only installs its modules into the system, it also injects malicious code into the system runtime libraries. Kaspersky Lab products detect it as...

Kaspersky Accuses Microsoft of Unfairly Disabling its Antivirus in Windows 10

Russian antivirus vendor Kaspersky Lab is so upset with US software giant Microsoft that the security firm has filed more antitrust complaints against the company. The antivirus firm initially filed a lawsuit late last year against Microsoft with Russian Federal Anti-monopoly Service FAS over...

WannaCry Development Errors Enable File Recovery

WannaCry may have caused worldwide havoc on May 12 when it rode the coattails of the NSA’s weaponized EternalBlue exploit to infect computers in 150 countries, but that doesn’t mean it was a quality piece of ransomware. A number of programming errors in the code are floating to the surface and...

Kaspersky SafeKids – Kids mode - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Kaspersky SafeKids – Kids mode published at the 'play' market has multiple vulnerabilities...

Leaked NSA Exploit Spreading Ransomware Worldwide

A ransomware attack running rampant through Europe today is spreading via an exploit leaked in the most recent ShadowBrokers dump. Researchers at Kaspersky Lab said the attackers behind today’s outbreak of WannaCry ransomware are using EternalBlue, the codename for an exploit made public by the...

IBM: Destroy USBs Infected with Malware Dropper

USB drives shipped with some IBM’s Storwize storage products are infected with malware, and the tech giant advises customers destroy the devices. IBM would not comment on the source of the infection or where in the supply chain the interdiction happened, and instead referred Threatpost to an...

Lack of Communication Achilles' Heel for Ransomware Fighters

BOSTON—Collaboration is important when it comes to fighting ransomware, but the lack of communication around the issue remains a serious impediment, law enforcement says. “If we don’t know about it and no one keeps track of it, then no one cares,” Frank McLaughlin, a detective with the Boston...

Stuxnet LNK Exploits Still Widely Circulated

One of the alleged mandates around the development of the Stuxnet worm was that malware’s numerous components—which included a handful of zero days—should never escape the Natanz uranium enrichment facility in Iran. Eight years later, evidence continues to mount as to how that mandate was...

On Baseband Vulnerabilities, SIEMs, Samsung Tizen and More

Mike Mimoso, Tom Spring, and Chris Brook recap two conferences from last week: Infiltrate Con in Miami and Kaspersky Lab’s Security Analyst Summit in St. Maarten. A baseband vulnerability, SIEMs, vulnerabilities in Samsung’s Tizen operating system, and an IoT honeypot are discussed. Download:...

No More Ransom — 15 New Ransomware Decryption Tools Available for Free

No More Ransom, so is the Ransomware Threat. Launched less than a year ago, the No More Ransom NMR project has increased its capacity with new partners and new decryption tools added to its now global campaign to combat Ransomware. Started as a joint initiative by Europol, the Dutch National...

Hackers stole $800,000 from ATMs using Fileless Malware

Hackers targeted at least 8 ATMs in Russia and stole $800,000 in a single night, but the method used by the intruders remained a complete mystery with CCTV footage just showing a lone culprit walking up to the ATM and collecting cash without even touching the machine. Even the affected banks coul...

Microsoft Application Verifier exposed 0day vulnerabilities, the impact of Trend Micro, Kaspersky, Symantec, including a large number of security products-vulnerability warning-the black bar safety net

Recently, Cybellum company found a 0-day vulnerability, can completely control most of the security product. This vulnerability is called“DoubleAgent”is a double-sided Spy, and many security vendors by DoubleAgent effects, including Avast, AVG, Avira, Bitdefender, Trend Micro, Comodo Comodo, ESET...

KLA10984 Privilege escalation vulnerabilities in Windows kernel

Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An improper check of a buffer length prior to copying memory to the buffer can be exploited remotely ...

KLA10978 Multiple vulnerabilities in Windows Uniscribe

Multiple serious vulnerabilities have been found in Windows Uniscribe. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities: 1. An improper handling of objects in memory can be exploted remotely vi...

kaspersky.com.cn XSS vulnerability

Vulnerable URL: https://www.kaspersky.com.cn/search/'"--! Details: Description| Value ---|--- Patched:| Yes, at 20.04.2017 Latest check for patch:| 20.04.2017 15:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61722 VIP website status:| No Check...

kaspersky.co.in XSS vulnerability

Vulnerable URL: https://www.kaspersky.co.in/search/'"--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50287 VIP website status:| No Check kaspersky.co.in SSL connection:| Grade: A- Coordinated Disclosure...

kaspersky.fr XSS vulnerability

Vulnerable URL: https://www.kaspersky.fr/search?query='"--! Details: Description| Value ---|--- Patched:| Yes, at 20.04.2017 Latest check for patch:| 20.04.2017 15:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49543 VIP website status:| Yes Check kaspersky....

kaspersky.dk XSS vulnerability

Vulnerable URL: https://www.kaspersky.dk/search/'"--! Details: Description| Value ---|--- Patched:| Yes, at 20.04.2017 Latest check for patch:| 20.04.2017 15:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5391078 VIP website status:| No Check kaspersky.dk SS...

kaspersky.co.za XSS vulnerability

Vulnerable URL: https://www.kaspersky.co.za/search?query='"--! Details: Description| Value ---|--- Patched:| Yes, at 20.04.2017 Latest check for patch:| 20.04.2017 15:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 106322 VIP website status:| No Check...