CVE-2024-25852

Linksys RE7000 is affected by CVE-2024-25852 (v2.0.9, v2.0.11, v2.0.15) due to a command execution vulnerability in the AccessControlList parameter of the access control function point. The vulnerability allows an attacker to achieve device administrator rights via command execution. The connecte...

A new era in mobile banking Trojans

In mid-July 2017, we found a new modification of the well-known mobile banking malware family Svpeng – Trojan-Banker.AndroidOS.Svpeng.ae. In this modification, the cybercriminals have added new functionality: it now also works as a keylogger, stealing entered text through the use of accessibility...

First Android-Rooting Trojan With Code Injection Ability Found On Google Play Store

A new Android-rooting malware with an ability to disable device’ security settings in an effort to perform malicious tasks in the background has been detected on the official Play Store. What's interesting? The app was smart enough to fool Google security mechanism by first pretending itself to b...