CVE-2021-26899

Windows UPnP Device Host Elevation of Privilege Vulnerability...

Android users hit by banking trojan in 10 Play Store apps

By Deeba Ahmed Another day, another Android banking trojan caught targeting unsuspecting users but this time it does it from Play Store without any prevention. This is a post from HackRead.com Read the original post: Android users hit by banking trojan in 10 Play Store apps...

com.alvazan:playorm (1.4.42g), com.google.code.maven-play-plugin.org.playframework.modules.crud:play-crud (>=1.2.5, <=1.2.7) +12 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.4.2.final)

io.netty:netty MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.alvazan:playorm 1.4.42g - com.google.code.maven-play-plugin.org.playframework.modules.crud:play-crud =1.2.5, =1.2.5,...

Google Play Harbors Malware-Laced Apps Bent on Spying

A malware dropper that paves the way for attackers to remotely steal data from Android phones has been spreading via nine malicious apps on the official Google Play store, according to researchers. The malware is part of a campaign aimed at lifting victims’ financial information, but which also...

9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware

Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial accounts of victims as well as full control of their devices. "This...

9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware

Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial accounts of victims as well as full control of their devices. "This...

Microsoft Windows UPnP 安全漏洞

Microsoft Windows UPnP is a device proxy from Microsoft USA. Providing a proxy allows a Windows network connection to recognize the ZoneDirector's IP address. A security vulnerability exists in the Windows UPnP device host. The following products and versions are affected: Windows Server, version...

USN-4734-2 wpa vulnerabilities

USN-4734-1 fixed several vulnerabilities in wpasupplicant. This update provides the corresponding update for Ubuntu 14.04 ESM. It was discovered that wpasupplicant did not properly handle P2P Wi-Fi Direct group information in some situations, leading to a heap overflow. A physically proximate...

Malicious Barcode Scanner App

Interesting story about a barcode scanner app that has been pushing malware on to Android phones. The app is called Barcode Scanner. Its been around since 2017 and is owned by the Ukrainian company Lavabird Ldt. But a December 2020 update included some new features: However, a rash of malicious...

Who is to blame for the malicious Barcode Scanner that got on the Google Play store?

In our last blog, Barcode Scanner app on Google Play infects 10 million users with one update, we wrote about a barcode scanner found on the Google Play store that was infected with Android/Trojan.HiddenAds.AdQR. All initial signs led us to believe that LavaBird LTD was the developer of this...

USN-4734-1 wpa vulnerabilities

It was discovered that wpasupplicant did not properly handle P2P Wi-Fi Direct group information in some situations, leading to a heap overflow. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2021-0326 It was discovered that...

Military, Nuclear Entities Under Target By Novel Android Malware

Researchers have uncovered two novel Android surveillanceware families being used by an advanced persistent threat APT group to target military, nuclear and election entities in Pakistan and Kashmir. The two malware families, which researchers call “Hornbill” and “SunBird,” have sophisticated...

Google Play Boots Barcode Scanner App After Ad Explosion

A barcode scanner app, with over 10 million downloads, was booted from the Google Play marketplace after users began to complain of mobile-ad overload. The makers of the app, called Barcode Scanner, intentionally altered the code of the app via an update turning it from a benign app to adware,...

com.alvazan:playorm (1.4.42g), com.google.code.maven-play-plugin.org.playframework.modules.crud:play-crud (>=1.2.5, <=1.2.7) +12 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (3.4.2.final)

io.netty:netty MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.alvazan:playorm 1.4.42g - com.google.code.maven-play-plugin.org.playframework.modules.crud:play-crud =1.2.5, =1.2.5,...

Top Barcode Scanner app infected 10 million users with malware

By Deeba Ahmed The Barcode Scanner app with over 10 million installs has been removed by Google from Play Store after it was reported for malicious activities. This is a post from HackRead.com Read the original post: Top Barcode Scanner app infected 10 million users with malware...

Barcode Scanner app on Google Play infects 10 million users with one update

UPDATE: February 12, 2021 It has come to our attention that there is another bad actor in this story. Apparently, the original publisher, LAVABIRD LTD, is not the bad actor. It is instead an account under the name "The space team." Nevertheless, there is evidence that updates of Barcode Scanner b...

D-link DSR-250 命令注入漏洞

The D-link DSR-250 is a Unified Services Router. An input validation vulnerability exists in the D-link DSR-250 UPnP service, which allows remote attackers to exploit the vulnerability to submit a special request that can be used in the service context to execute arbitrary commands...

Beware — A New Wormable Android Malware Spreading Through WhatsApp

A newly discovered Android malware has been found to propagate itself through WhatsApp messages to other contacts in order to expand what appears to be an adware campaign. "This malware spreads via victim's WhatsApp by automatically replying to any received WhatsApp message notification with a li...

Beware — A New Wormable Android Malware Spreading Through WhatsApp

A newly discovered Android malware has been found to propagate itself through WhatsApp messages to other contacts in order to expand what appears to be an adware campaign. "This malware spreads via victim's WhatsApp by automatically replying to any received WhatsApp message notification with a li...

HosTaGe - Low Interaction Mobile Honeypot

HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most malware propagate over the network via specific protocols, a low-interaction honeypot located at a mobile device can check...