Zacinlo malware spams Windows 10 PCs with ads and takes screenshots

By Waqas The IT security researchers at Bitdefender have discovered a sophisticated This is a post from HackRead.com Read the original post: Zacinlo malware spams Windows 10 PCs with ads and takes screenshots...

Apple Bans Cryptocurrency Mining Apps From Its App Stores

Due to the surge in cryptocurrency prices, not only hackers but also legitimate websites and mobile apps are increasingly using cryptocurrency miners to monetize by levying the CPU power of your PC and phones to mine cryptocurrencies. However, Apple wants to protect your Mac and iPhone battery fr...

A week in security (June 4 – June 10)

Last week on Labs, we took a look at hidden mobile ads, the perils of social media spam, and how to shore up your landline defenses. We also took a deep dive into Emotet malware analysis, and gave you some summertime safety tips. Other news Update your Adobe Flash player if you haven't already...

Mobile Menace Monday: A race to hidden ads

Who doesn’t love a good motorcycle racing game, right? How about one easily available on Google Play, a “safe” place for all your Android app desires? How about a bike racing game that sticks with you so much, you can’t easily uninstall it? And it displays hidden ads? Wait, what!? That’s right! I...

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?srank=1520 Version: 1.6.2 Tested...

Scammers bought Twitter ads to run verified badge phishing scam

By Waqas Would you believe that the verification program approved by Twitter This is a post from HackRead.com Read the original post: Scammers bought Twitter ads to run verified badge phishing scam...

ads.24ur.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-605308 Description| Value ---|--- Affected Website:| ads.24ur.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

Calls For Regulation Build After Facebook Privacy Fallout

As Facebook CEO Mark Zuckerberg appeared before Congress this week, politicians stressed the need for regulation to secure end users’ data privacy on social media platforms. The series of hearings on Tuesday and Wednesday gave members of Congress an opportunity to question Facebook about multiple...

SQL Injection Vulnerability in Gxlcms News System AdsAction.class.php

Gxlcms News System is a news cms content management system developed in php+mysql. A SQL injection vulnerability exists in Gxlcms News System AdsAction.class.php. An attacker can exploit the vulnerability to obtain sensitive database information...

Block All Domains That Serve Ads, Tracking Scripts and Malware: hBlock

Improve your security and privacy by blocking ads, tracking and malware domains. This POSIX-compliant shell script, designed for Unix-like systems, gets a list of domains that serve ads, tracking scripts and malware from multiple reputable sources and creates a hosts file that prevents your syste...

US government seizes classified advertising website Backpage

By Waqas Backpage was once the second largest classified advertising site after This is a post from HackRead.com Read the original post: US government seizes classified advertising website Backpage...

Secutech RiS-11/RiS-22/RiS-33 5.07.52_es_FRI01 Remote DNS Changer Vulnerability

Exploit for hardware platform in category web applications Secutech RiS-11/RiS-22/RiS-33 V5.07.52esFRI01 Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by...

Tenda FH303/A300 Firmware V5.07.68_EN - Remote DNS Change Vulnerability

Exploit for asp platform in category web applications Tenda FH303/A300 Firmware V5.07.68EN Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually...

Tenda W316R Wireless Router 5.07.50 - Remote DNS Change Vulnerability

Exploit for asp platform in category web applications Tenda W316R Wireless Router V5.07.50 Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually...

ISPs Caught Injecting Cryptocurrency Miners and Spyware In Some Countries

Governments in Turkey and Syria have been caught hijacking local internet users' connections to secretly inject surveillance malware, while the same mass interception technology has been found secretly injecting browser-based cryptocurrency mining scripts into users' web traffic in Egypt...

Mobile Menace Monday: Olympics app has more ads than games

An app claiming to live stream the 2018 Winter Olympics but really serving up a blizzard of ads had a short run on Google Play. It was uploaded to the Play store on February 8, 2018. Since then, it's been removed. The last known existence of it on the store was a cached snapshot from February 10...

Ad Network Circumvents Ad-Blocking Tools To Run In-Browser Cryptojacker Scripts

Cryptojackers are getting resourceful and have figured out how to bypass ad-blocking software and deliver the Coinhive JavaScript miner via browser-based ads. Researchers at Qihoo’s Netlab 360 said it recently spotted an advertising network that was using what is called a domain generation...

Facebook Will Verify the Physical Location of Ad Buyers with Paper Postcards

It's not a great solution, but it's something: The process of using postcards containing a specific code will be required for advertising that mentions a specific candidate running for a federal office, Katie Harbath, Facebook's global director of policy programs, said. The requirement will not...

Semrush: Ad Builder Display Ads Path Traversal

Summary: The Semrush Ad Builder for Display Ads is vulnerable to path traversal when extracting zip files and referencing images from the embedded data.csv file. Description: The Semrush Ad Builder for Display Ads allows users to import Display Ads from an uploaded zip file. The backend...

Hackers use Google Ads to steal $50 million of Bitcoin

By Waqas Another day, another Bitcoin scam - This time it abuses Google This is a post from HackRead.com Read the original post: Hackers use Google Ads to steal $50 million of Bitcoin...