California man may get 6 months in prison for uploading Deadpool on Facebook

By Carolina It is quite unlikely that somebody would be naïve enough to upload a copy of a newly released movie on his Facebook page with his real name since this would lead the law enforcement straight to the person, that too, in no time. However, it seems that there is one such person and his...

Dark Web: US court seizes assets and properties of deceased AlphaBay operator

By Carolina AlphaBay was one of the largest dark web marketplaces - In 2017, its admin Alexandre Cazes committed suicide in a Thai prison. The Fresno Division of the U.S. District Court for the Eastern District of California has finally concluded a 14-month long civil forfeiture case and allowed...

Linux & Windows hit with disk wiper, ransomware & cryptomining Xbash malware

By Waqas Xbash is an "all in one" malware. Palo Alto Networks’ Unit 42 researchers have come to the conclusion that the notorious Xbash malware that has been attacking Linux and Windows servers is being operated by the Iron Group which is an infamous hacker collective previously involved in a...

Hackers disrupt UK’s Bristol Airport flight info screens after ransomware attack

By Uzair Amir The ransomware attack disrupted the screens for two days. In a nasty ransomware attack, flight information screens at the United Kingdom's Bristol airport were taken over and hijacked by malicious hackers on September 15th Friday morning. The ransomware attack forced the airport sta...

Safari & Firefox browser to block user data tracking with new security add-ons

By Waqas Apple has been trying hard to improve the security mechanisms of its hardware and software products. The addition of new privacy features in Safari browser is yet another attempt to toughen security measures for preventing breaches and tracking by websites like Facebook. It is a well-kno...

Medical records & patient-doctor recordings of thousands of people exposed

By Carolina Another day, another trove of medical records leaked online, thanks to a misconfigured AWS S3 bucket. Medical records are considered to be sensitive documents and when a malicious third party has access to them it is a bad news as these records can be used for fraud, blackmailing and...

Apache Struts & SonicWall’s GMS exploits key targets of Mirai & Gafgyt IoT malware

By Waqas Security researchers at Palo Alto Networks’ Unit 42 have discovered modified versions of the notorious Mirai and Gafgyt Internet of Things IoT malware. The malware have the capability of targeting flaws that affect Apache Struts and SonicWall Global Management System GMS. Moreover, the...

Official mobile version of Tor Browser released for Android – Download now

By Waqas There is good news for pro-anonymity web users who rely upon the Tor browser for using the internet. The first ever mobile browser app for the Tor browser has been released by the Tor Project, the organization behind the Tor network. The mobile version of the Tor browser is available for...

Canadian town forced to pay Bitcoin after nasty ransomware attack

By Uzair Amir The town of Midland, Ontario, Canada, has decided to pay cybercriminals after its servers were targeted and infected with a nasty ransomware on Saturday, September 1, at approximately 2 a.m. The total amount of ransom payment has not been disclosed but the demand from cybercriminals...

Cloud data management firm exposes database with over 440M emails & IP addresses

By Waqas Data management software companies are mandatorily believed to be having perfectly capable of managing their own data. However, it turns out that some companies, the most popular ones too, struggle to do so. The well-known cloud data management firm Veeam has been in the news lately for...

Russian Cybercriminal Pleads Guilty to Operating Kelihos Botnet

By Uzair Amir A Russian national namely Peter Yuryeich Levashov has pleaded guilty to operating the Kelihos botnet, which was used to launch a huge spamming and credential stealing campaign across the globe. Levashov, a 38-year old resident of St. Petersburg, Russia, was presented before a...

Apple removes top anti-malware apps from its store for “stealing data”

By Waqas Adware Doctor and Trend Micro Apps have been kicked out by Apple. Apple Inc. has always propagated its products as designed with most advanced security and privacy practices. The company has also promoted itself as the only firm that prioritizes and safeguards user privacy. The iOS and M...

Pakistani hacker reports address bar spoofing flaws in Edge & Safari browser

By Waqas Rafay Baloch has reported Vulnerability in Edge and Safari Browsers that Allows Address Bar Exploitation. Nowadays the phishing attacks have become increasingly sophisticated and difficult to detect so it is indeed appreciable that security researchers are managing to spot such campaigns...

Air-conditioned apocalypse: A blackout scenario involving smart climate control devices

By David Balaban Science fiction movies often depict various situations related to cybercriminals’ activity. These can include predicaments where threat actors disrupt the transportation system of a large city or cause power outages in entire regions. In fact, this is beyond science fiction these...

Security firm uses Twitter to disclose critical zero-day flaw in Tor Browser

By Waqas Zerodium, an infosec and premium zero-day acquisition platform tweeted about the flaw in Tor browser on Monday. The infamous exploit vendor and buyer/seller of popular software vulnerabilities, Zerodium has revealed a critical flaw in Tor browser software. According to a tweet posted by...

Researchers demonstrate how to unlock Tesla wireless key fobs in 2 seconds

By Waqas Vulnerabilities and security flaws in vehicle security systems aren’t as surprising for us as it is that even the most renowned car manufacturers aren’t able to provide consumers with fool-proof systems. Wired reports that Tesla recently fixed a vulnerability in the security systems of i...

Teen arrested for DDoS attack on ProtonMail & making fake bomb threats

By Waqas ProtonMail, a Swiss-based end-to-end email encryption service, has announced the name of one of the attackers involved in the DDoS attack against the company earlier this year. Due to the attack, the email service of ProtonMail stopped responding for a minute several times despite having...

Schneider Electric Shipped USB Drives Loaded with Malware

By Uzair Amir Schneider Electric has released a warning and advisory notice according to which the USB drives shipped with some of the company’s products may be infected with malware. “Schneider Electric is aware that USB removable media shipped with the Conext Combox and Conext Battery Monitor...

WannaCry ransomware fame North Korean hacker tracked down by the US

By Waqas It is no secret that the US government has always suspected and even accused North Korea was carrying out ransomware attacks using the destructive WannaCry ransomware and for hacking Sony Pictures. But it merely has remained a suspicion so far. However, now the US authorities have found...

British Airways hacked- Private & financial data of 380,000 customers stolen

By Waqas Hackers are always looking for new and profitable targets for their own malicious gains. So, it is quite natural that the world’s favorite airline is on their radar. Reportedly, British Airways has become a victim of a “worrying” and “astounding” data breach in which private and financia...

Misconfigured Tor sites using SSL certificates exposing public IP addresses

By Waqas Tor is a browser known to keep the IP addresses of its users private and confidential due to which users can surf the web anonymously. However, according to RiskIQ’s threat researcher Yonathan Klijnsma, it is possible to identify the IP addresses of Tor users. Klijnsma states that...

MEGA Chrome extension hacked with cryptocurrency malware

By Waqas Cloud storage solution MEGA delivered Monero cryptocurrency malware. 21st-century technologies like blockchain are regarded as groundbreaking inventions. However, the security aspect of the new age digital systems has always been criticized for being lackluster and flawed. This concern i...

Don’t Fall for Webcam Blackmail: Here’s How to Protect Yourself

By Waqas NordVPN Tips on How to Avoid Sextortion Scammers Who Claim to Have a Video of You on Adult Sites. Authorities and cybersecurity experts have issued a fresh warning about the so-called sextortion scam that is making a comeback with new variations. Webcam porn scams have been on the rise f...

Google and MasterCard will track your retail spending under a secret deal

By Waqas Google and MasterCard have jointly cut an ad deal to track your retail transactions. So far, we only knew that Google can track out online shopping preferences as we clicked on ads. However, this is quite surprising that it can now keep track of our retail transactions history from...

CamuBot Malware Camouflaged as Bank Security App to Steal Credentials

By Waqas A new banking malware has been discovered that is targeting bank customers in Brazil. Dubbed as CamuBot, it is identified to be a unique malware because it is disguised as a necessary security module of the bank. The malware can also bypass the biometric authentication feature, which is ...

You are not alone; Facebook, Instagram and WhatsApp are down for many (Updated)

By Waqas You are not alone; the social media giant Facebook and its subsidiaries Instagram and WhatsApp Messenger are down in many countries around the world for almost an hour starting from 10 pm UK time. The reason for this outage is currently unknown and there has been no statement from...

Parental control spyware app Family Orbit hacked; 281 GB of data exposed

By Waqas Spyware is supposed to spy upon people, most notably criminals or threat actors. However, nowadays even spyware aren’t protected from vulnerabilities and are exposed to hackers. Recently we reported on the hacking of several spyware apps including FlexiSpy, Retina-X and TheTruthSpy. Now...

Hackers selling data of 130 million Chinese hotel clients on Dark Web for 8 BTC

By Waqas Now, this could easily be termed as one of the largest ever data hacks in the history of China. Reportedly, the data of roughly 130 million clients of the renowned Huazhu Hotels Group, China is up for sale at the Dark Web at the meager amount of 8 bitcoins US$56,000. The price is extreme...

Cryptomining scripts will be blocked in upcoming versions of Firefox browser

By Waqas In all the future versions of the Firefox web browser, cryptojacking malware will be blocked. Mozilla, the company behind Firefox browser, announced on August 30 that it is launching an anti-tracking initiative, which will be implemented broadly over the next few months. Firefox has cite...

Apple Watch saves one more life by notifying user about his unusual heart rate

By Waqas Who doesn't like elegant watches, especially those who can literally save your life like the Apple Watch, right? Last time when we talked about Apple Watch, it was related to a 62-year-old man who felt sick at work and decided not to bother his colleagues but when his Apple Watch's Healt...

John McAfee backed Bitfi wallet pwned again

By Uzair Amir The presumably unhackable Bitfi wallet backed by John McAfee has released a statement announcing that the unhackable tag will be removed from their marketing materials. The step comes after the device’s security was compromised by a Twitter user under the name @spudowiar. The...

DDoS attack from Anonymous Catalonia cripples Bank of Spain website

By Waqas The official website of Banco de España Bank of Spain, which is the central bank of the country, was hit by a Distributed Denial of Service DDoS attack on Sunday. The attack potentially disrupted the website’s operations and it became inaccessible at the beginning of the week. The attack...

Hacker who leaked naked photos of Jennifer Lawrence jailed for 8 months

By Carolina A Connecticut, USA based hacker who hacked more than 200 iCloud accounts and leaked private photos of top Hollywood celebrities and other people was sentenced to eight months in prison last Wednesday 29. In addition to the incarcerated time, George Garofano, 26, is scheduled to serve...

Cell-Site surveillance devices (Stingray) could disrupt 911 emergency calls

By Uzair Amir Senator Ron Wyden of Oregon has made startling new revelations about CSS or cell-site stimulators. These cell surveillance devices, better known as Stingray, are used to disrupt communications of cell phones, mostly of criminals and lawbreakers. However, Sen. Wyden asserts that the...

RIG Exploit Toolkit Distributing CeidPageLock Malware to Hijack Browsers

By Waqas A previously discovered browser hijacker malware dubbed as CeidPageLock has resurfaced again, in a bigger and better avatar, reveal researchers at Check Point security firm. This time around it is loaded with new features and is being distributed through the RIG Exploit kit. Trend Micro...

Company that Sells Spyware to Domestic Abusers Hacked

By Waqas An infamous seller of iOS and Android spyware app, TheTruthSpy, has been hacked. The company was criticized for selling spyware primarily to domestic abusers and openly marketing about it. The company markets its spyware as the best solution for spying upon cheating husbands and claims t...

Brazilian Crypto exchange hacked; private data of over 264,000 users exposed

By Waqas A Brazilian firm Crypto exchange Atlas has become a victim of a security breach and over 264,000 users’ email addresses, phone numbers, and cryptocurrency amount related information might have been leaked. The news of data hack was reported firstly by a YouTube channel in Brazil called...

6 Tips to Protect Your Online Business from Cyber Attacks

By Carolina Cybercrime is on the rise, there is no denying this fact. With people becoming more reliant on technology, using their smartphones to log into their bank accounts and using social media which stores and uses your data, hackers are sometimes able to take advantage of this. You may thin...

Hackers Publish PoC of Zero-day Vulnerability in Windows on Twitter

By Waqas New Privilege Escalation Bug Identified in Windows OS. Recently a Twitter user, using the handle SandboxEscaper, disclosed that the Microsoft Windows OS has a zero-day vulnerability, which is yet unknown to the company. Tweeting on the microblogging platform, the user stated: "Here is th...

Lazarus Group’s AppleJeus MacOS malware targeting cryptocurrency exchanges

By Waqas Lazarus Group is believed to be backed by the North Korean government and now it is using AppleJeus MacOS Malware. Security researchers from the Global Research and Analysis Team at Kaspersky Lab have discovered the first-ever Lazarus deployed malware for MacOS. It is reported that Lazar...

Google finds flaw in Android Fortnite’ Installer leading to malware installation

By Waqas Another day, another Fortnite malware vulnerability. Epic Games’ decision of skipping Google Play Store and releasing Android Fortnite on its official website directly was perceived as an unwise move. We recently informed our readers about the salient repercussions of this decision. It...

You are not alone; The Pirate Bay is down for everyone

By Carolina The Pirate Bay is down for everyone for more than 20 hours. From the United States to India, all around the world authorities have told their Internet service providers ISPs to block each and every piracy site including The Pirate Bay but what about when these sites go down due to...

T-Mobile data breach: Personal data of 2 million users stolen

By Waqas The stolen data also includes "encrypted" passwords. Another day, another T-Mobile data breach. This time, the telecommunication giant T-Mobile has announced that it has suffered a data breach in which unknown hackers have stolen personal data of 2 million customers. According to the...

You can now run Windows 95 on your Mac, Linux and Windows 10 devices

By Carolina The maximum RAM that Windows 95 consumes within Windows 10 is just 200 MB. We have seen hackers doing wonders like hacking PlayStation 4 to run PS2 emulation or homebrew software, hacking Android-compatible Google Daydream VR Controller to run on iOS or run Linux OS on Nintendo Switch...

Augusta University Health data breach: Private data of over 417,000 individuals exposed

By Uzair Amir Georgia-based Augusta University Health has admitted for becoming the victim of a data breach back in 2017. In the data breach, personal data of more than 417,000 patients, students, and faculty members got leaked. The breach resulted from a phishing attack. Augusta University...

Republican & Conservative leaders are the new targets of Russian hackers —Microsoft

By Uzair Amir Microsoft has released a startling report exposing the way Russian military intelligence and its hackers planned to target the US Senate and conservative think tanks. The software giant not only identified but also seized those websites that were recently created for the sole purpos...

Misconfigured backup leads to exposure of 50.5 million GOMO Mobile customers

By Waqas The same company was once caught spying on its Keyboard app users. GOMO, which is also known as Sungy Mobile, is a well-known Chinese mobile app and software developer company. It is famous worldwide for GO series applications Yes, the developers of popular GOKeyboard app that was caught...

Hackers can intercept and manipulate DNS queries, researchers warn

By Waqas DNS Queries Intercepted Due to Bogus DNS Traffic Protection Standards. Would you believe that a majority of the DNS queries that are sent remain unprotected on the web? We would never have believed it but the fact is that DNS traffic interception is a reality and it is happening quite...

IoT botnet of heaters & ovens can cause massive widespread power outages

By Uzair Amir Botnet of Smart Power-Consuming Appliances May Cause Widespread Power Outages. Digital technology has revolutionized the way we use appliances and perform day-to-day chores. Nowadays, our air conditioners are smart enough to be turned off or on remotely, washing machines send us a...

Fake Android Fortnite version circulating on the web to spread malware

By Waqas Beware while downloading Fortnite on your Android device because you may end up getting your device infected with malware. According to the analysis of Lookout cyber-security firm’s researchers Adam Bauer and Christoph Hebeisen, whoever downloads the recently released Android Fortnite on...