Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign

A wave of targeted cyberattack campaigns bent on espionage is cresting around the globe, using a strain of a 13-year old backdoor trojan named Bandook. According to Check Point Research, Bandook was last spotted being used in 2015 and 2017/2018, in the “Operation Manul” and “Dark Caracal”...

Robotic vacuum cleaners could be hacked to spy on you

By Sudais Asif According to researchers, robotic vacuum cleaners can be hacked to spy on users by recording both conversations and music. This is a post from HackRead.com Read the original post: Robotic vacuum cleaners could be hacked to spy on you...

Ghimob Android Banking Trojan Targets 153 Mobile Apps

A new banking trojan has been discovered targeting Android users, with the capabilities to spy on 153 mobile apps from various banks, cryptocurrencies and exchanges. Researchers describe the banking trojan, called Ghimob, as a “full-fledged spy in your pocket” that can be accessed remotely by its...

MessageHistory

MessageHistory Version 3.0 Created Date: 08/20/2006 Updated Date: 09/25/2013 Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools Description Sometimes Citrix Technical Support needs to...

Python-based Spy RAT Emerges to Target FinTech

The Evilnum group, which specializes in targeting financial technology companies, has debuted a new tool: A Python-based remote access trojan RAT, dubbed PyVil. The malware’s emergence dovetails with a change in the chain of infection and an expansion of infrastructure for the APT. According to...

A New Gadget Stops Voice Assistants From Snooping on You

Meet LeakyPick, the low-cost audio spy detector for your Amazon Alexa, Google Home, and other network-connected devices...

action-tracker (>=0.1.1 <=1.2.1), aye-spy (>=1.2.0 <=2.2.3) +12 more potentially affected by CVE-2020-4059 via mversion (>=1.12.0 <=1.13.0)

mversion NPM version =1.12.0, =0.1.1, =1.2.0, =1.0.0, =1.0.0, =0.0.0, =0.1.7, =2.4.18, =1.0.0, =1.1.1, =0.0.0, =0.1.0, =1.0.0 Source cves: CVE-2020-4059 Source advisory: OSV:GHSA-QJG4-W4C6-F6C6...

CVE-2020-0124

creationtimestamp| type| source ---|---|--- 2020-06-11 18:55:27+00:00| seen| Telegram/spy52EwrkP8cyzDKJR4R9kKqIufXfx4TN8kBCnLUGUPHQ...

New iOS vulnerability being exploited to spy on Uyghurs in China

By Sudais Asif It is being revealed that a new and critical iOS vulnerability is being exploited to spy on the Uyghurs minority in China. This is a post from HackRead.com Read the original post: New iOS vulnerability being exploited to spy on Uyghurs in China...

SSHPry v2.0 - Spy and Control os SSH Connected client's TTY

This is a second release of SSHPry tool, with multiple features added. Control of target's TTY Built-In Keylogger Console-Level phishing Record & Replay previous sessions Demo Blogpost: http://www.korznikov.com/2017/09/sshpry-v2-spy-control-ssh-connected.html Twitter: @nopernik Howto ./sshpry2.py...

An Elite Spy Group Used 5 Zero-Days to Hack North Koreans

South Korea is a prime suspect for exploiting the secret software vulnerabilities in a sophisticated espionage campaign...

Iran-Backed APTs Collaborate on 3-Year 'Fox Kitten' Global Spy Campaign

Two Iran-backed APTs could be working together on a sprawling, three-year campaign to compromise high-value organizations from the IT, telecom, oil and gas, aviation, government and security sectors in Israel and around the world, according to a report by researchers at ClearSky. They maintain,...

Uninstall ToTok, an Alleged Emirati Spy App, From Your Phone Now

A messaging app called ToTok had scores of positive reviews, particularly from users in the UAE. US intelligent officials say it may be spying for that government instead...

@jamesbliss/react-flickity (>=1.0.0 <=1.4.0), @jamesbliss/react-spy (=0.0.1) +21 more potentially affected by CVE-2019-10773 via yarn (>=1.0.2 <=1.21.0)

yarn NPM version =1.0.2, =1.0.0, =1.9.9, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.5.9, =1.1.2, =1.13.1 and more Source cves: CVE-2019-10773 Source advisory: SNYK:JS-YARN-537806...

Flaw authorizes attackers to spy on users through Android camera

By Sudais If exploited; the vulnerability can do much more against Android users especially those using Google & Samsung phones. Here's what it can do: This is a post from HackRead.com Read the original post: Flaw authorizes attackers to spy on users through Android camera...

DarkUniverse APT Emerges to Deliver Sophisticated, Targeted Spy Attacks

A sophisticated espionage APT that was active for at least eight years before receding into the shadows has been uncovered — and researchers said that it may still be active. In April 2017, ShadowBrokers published one of their many leaks of cyberweapons used by the National Security Agency NSA an...

IoT-Implant-Toolkit - Toolkit For Implant Attack Of IoT Devices

IoT-Implant-Toolkit is a framework of useful tools for malware implantation research of IoT devices. It is a toolkit consisted of essential software tools on firmware modification, serial port debugging, software analysis and stable spy clients. With an easy-to-use and extensible shell-like...

Planting Tiny Spy Chips in Hardware Can Cost as Little as $200

A new proof-of-concept hardware implant shows how easy it may be to hide malicious chips inside IT equipment...

The State of Stalkerware in 2019

Introduction and methodology Six months ago, we created a special alert that notifies users about commercial spyware stalkerware products installed on their phones. This report examines the use of stalkerware and the number of users affected by this software in the first eight months of 2019...

DEBIAN-CVE-2019-16943

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the p6spy 3.8.6 jar in the classpath, and an attacker can find an RMI...