inside-pegasus

Внутри Pegasus: ключевые документы из WhatsApp v. NSO Group Подборка внутренних документов NSO Group, материалов о продуктах и показаний под присягой, которые попали в открытый реестр суда по делу WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies...

fake-sandbox

Processus factices de bac à sable FSP Ce petit script simulera des processus factices de logiciels d'analyse, de bac à sable et de machines virtuelles que certains malwares tenteront d'éviter. Vous pouvez télécharger le script original de @x0rz ici merci au passage. Vous pouvez également...

CVE-2023-36168

CVE-2023-36168 Проблема в AVG AVG Anti-Spyware v.7.5 позволяет атакующему выполнить произвольный код с помощью специально созданного сценария, отправленного компоненту guard.exe Название эксплойта: AVG Anti Spyware 7.5 - Путь службы без кавычек Дата: 05/08/2023 Автор эксплойта: Idan Malihi Домашн...

hijackthis

Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...

WindowsSpyBlocker

À propos WindowsSpyBlocker 🛡️ est une application écrite en Go et fournie sous forme d'exécutable unique pour bloquer l'espionnage et le pistage sur les systèmes Windows. L'approche de ce projet consiste à capturer et interpréter le trafic réseau à l'aide d'un ensemble d'outils. En fonction des...

mvt

Mobile Verification Toolkit !IMPORTANT Недавно мы объединили ветку «v3». Это привело к критическим изменениям. Если вы полагались на вывод mvt в других скриптах, они могли сломаться. Подробнее: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT — это набор утилит для...

iGPU-Leak

CVE-2019-14615: La vulnérabilité iGPU-Leak Wenjian He, Wei Zhang, Sharad Sinha et Sanjeev Das. iGPU Leak : une vulnérabilité de fuite d'informations sur le GPU intégré Intel. Dans les actes de la 25e Conférence asiatique et sud-pacifique sur la conception automatique ASP-DAC'20. Voir le PDF Voir...

sAINT

Abandonné J'ai décidé d'abandonner le développement de cet outil pour concentrer mes efforts sur d'autres projets. N'hésitez pas à cloner ce dépôt et à continuer le développement de cet outil. sAINT sAINT est un générateur de logiciels espions pour systèmes Windows écrit en Java. Avertissement...

CVE-2026-67595

CVE-2026-67595 — Встроенный вредоносный JavaScript в VaahCMS Бюллетень безопасности по CVE-2026-67595 : обфусцированная JavaScript-шпионская полезная нагрузка, поставляемая внутри официальных релизов VaahCMS проблема цепочки поставок / встроенного вредоносного кода, независимо обнаруженная и...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Exécution de code à distance dans le codec d'image Samsung ⚙️ Qu'est-ce que c'est Une vulnérabilité critique dans la bibliothèque de traitement d'image de Samsung libimagecodec.quram.so — utilisée sur les appareils Galaxy Android. 🧩 Il s'agit d'une faille d'écriture hors limites...

Astra Linux – Vulnerability in ca-certificates

Certifi is a curated collection of Root Certificates designed to validate the reliability of SSL certificates and verify the identity of TLS hosts. On December 7, 2022, Certifi removed Root Certificates from “TrustCor” from the root store. These certificates are currently being removed from...

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The...

MAL-2026-14516 Malicious code in minecraft-ytreceiver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad998d7ff924f18f57116d8dd586342fd060d8fb1459d94c0a911589bc2e3686 The package's module polls a hardcoded Telegram bot api.telegram.org, bot id 8871201315 for commands scoped to a specific chat and topic. On matching...

MAL-2026-14271 Malicious code in nodeberlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0daee18c4afae327b271a2178e90822f750a17d97f7dfb1236e6dd37ef9410d9 The CLI polls the system clipboard every 300ms and captures full-desktop or user-snipped screen regions, then POSTs the JSON text and base64-encoded...

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

Apple on Thursday sent a fresh batch of notifications to customers whom it suspects may have been targeted by mercenary spyware attacks. In a statement shared with TechCrunch, the iPhone maker said it alerted an unspecified number of users targeted in 110 countries and that it has notified...

MAL-2026-11413 Malicious code in reguestsc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20e4ae2ce79408a65e9b4bb348c2d69e20eb6072e3641531e2ec5773f1bbddd6 Clones of a legitimate library with injected code downloading and executing a malicious executable on import. Dynamic analysis identified it as salatstealer. -...

European Parliament Member Investigating Spyware Was Hacked With Pegasus

A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial surveillance tools...

WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO

WhatsApp says it blocked Israeli firm NSO’s Pegasus spyware activity and is asking a US court to treat the targeting as an injunction breach...

Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group. In addition, the tech giant said it's filing a federal court contempt order against the company for violating a permanent injunction that barred it from targeting WhatsApp and its users...

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin , according to findings from ESET. The Slovakian cybersecurity company said it first detected the malware spread via multiple campaigns in early 2025, with each attack wave making use of distinct websites...