Articles tagged with Malware

Spyware Apps Found on Google Play Store

Researchers from mobile security firm Lookout say they found at least three Android apps on the Google Play Store that contained a form of advanced spyware they believe was created by an Iraqi developer.
- Catalin Cimpanu
- August 12, 2017
- 05:00 AM
- 0
New Mac Adware Mughthesec Will Cause Serious Headaches

A new family of Mac adware is bound to cause some headaches to infected victims, as the only way to remove it and its secondary payloads is by reinstalling macOS from scratch, according to the expert opinion of Patrick Wardle, Director of Research at Synack and a well-known Mac malware researcher.
- Catalin Cimpanu
- August 10, 2017
- 12:00 PM
- 1
New Version of Dangerous Android Malware Sold on Russian Hacking Forum

A new version of the Svpeng Android banking trojan has started making victims during the past month, and at the origin of this sudden surge in activity is a criminal selling a new and improved version of Svpeng on a Russian underground hacking forum.
- Catalin Cimpanu
- August 07, 2017
- 12:20 AM
- 0
Triada Trojan Found in Firmware of Low-Cost Android Smartphones

Security researchers have found malware inside the firmware of several low-cost Android smartphones, such as Leagoo M5 Plus, Leagoo M8, Nomu S10, and Nomu S20.
- Catalin Cimpanu
- July 28, 2017
- 12:25 PM
- 2
Newly Discovered CowerSnail Backdoor Targets Windows Computers

Security researchers have discovered a new backdoor trojan targeting Windows computers. Named CowelSnail, this malware appears to be the work of the same group who weaponized the SambaCry vulnerability to install cryptocurrency miners on Linux servers last month.
- Catalin Cimpanu
- July 26, 2017
- 01:50 AM
- 0
Banking Trojan Uses Mouse Movements to Distinguish Users From Virtual Machines

In July 2017, security researchers have spotted a new version of the proficient Ursnif banking trojan that comes with a clever trick to avoid sandbox environments and automated virtual machines by using mouse movements to detect if a real user is interacting with the computer.
- Catalin Cimpanu
- July 25, 2017
- 02:30 AM
- 0
Stantinko Modular Backdoor Infected Over 500,000 Computers

Over 500,000 users have had their computers infected with a stealthy malware named Stantinko, according to a 99-page report released yesterday by Slovak antivirus maker ESET.
- Catalin Cimpanu
- July 21, 2017
- 10:27 AM
- 0
SambaCry Vulnerability Used to Deploy Backdoors on NAS Devices

wSomeone is using the SambaCry vulnerability to install a backdoor trojan on Linux devices running older versions of the Samba file-sharing server.
- Catalin Cimpanu
- July 18, 2017
- 05:27 PM
- 0
New Ovidiy Stealer Malware Sold on Russian Site

A Russia-speaking malware developer going by the name of "TheBottle" has started selling a new infostealer with the name of Ovidiy Stealer.
- Catalin Cimpanu
- July 14, 2017
- 08:06 AM
- 0
The Second Most Popular Mac Malware Is a Cryptocurrency Miner

According to statistics released by Symantec today, the second most widespread Mac malware today is a cryptocurrency miner called DevilRobber, which saw a huge spike in activity last month.
- Catalin Cimpanu
- July 12, 2017
- 04:33 AM
- 1
Highly Advanced SpyDealer Malware Can Root One in Four Android Devices

Security experts have discovered a brand new Android trojan that features a broad range of features that allow it to root Android devices, steal data from over 40 apps, and geo-track phone owners.
- Catalin Cimpanu
- July 07, 2017
- 07:11 AM
- 0
CopyCat Adware Infects Zygote Android Core Process

For the past year and a half, an Android adware family known as CopyCat has infected over 14 million devices, rooted around 8 million, and made over $1.5 million for its owners.
- Catalin Cimpanu
- July 07, 2017
- 04:13 AM
- 0
CIA Malware Can Steal SSH Credentials, Session Traffic

WikiLeaks dumped today the documentation of two CIA hacking tools codenamed BothanSpy and Gyrfalcon, both designed to steal SSH credentials from Windows and Linux systems, respectively.
- Catalin Cimpanu
- July 06, 2017
- 06:30 PM
- 0
Owners of "VirusTotal-for-Crooks" Service Arrested

Ruslans Bondars and Jurijs Martisevs, two Latvian citizens, are facing charges in the US for running a portal that allowed cybercrooks to scan and see if their malware was detected by antivirus software.
- Catalin Cimpanu
- July 06, 2017
- 11:00 AM
- 3
New Report Calls Ransomware a "Marginal Phenomenon"

The AV-TEST Security Report 2016/2017 published today is calling ransomware a "marginal phenomenon," highlighting that only 0.94% of all malware deployed in 2016 was a blackmail trojan.
- Catalin Cimpanu
- July 05, 2017
- 10:10 AM
- 1
OutlawCountry Is CIA's Malware for Hacking Linux Systems

WikiLeaks dumped today a manual describing a new CIA malware strain. Called OutlawCountry, this is malware designed for Linux operating systems.
- Catalin Cimpanu
- June 30, 2017
- 06:27 PM
- 0
Vault 7: CIA Malware for Tracking Windows Devices via WiFi Networks

Today, WikiLeaks has published the documentation manual for an alleged CIA tool that can track users of WiFi-capable Windows devices based on the ESS (Extended Service Set) data of nearby WiFi networks.
- Catalin Cimpanu
- June 28, 2017
- 10:22 AM
- 0
Vault 7: CIA Has Malware for Hacking Air-Gapped Networks via USB Thumb Drives

WikiLeaks dumped today the manuals of several hacking utilities part of Brutal Kangaroo, a CIA malware toolkit for hacking into air-gapped (offline) networks using tainted USB thumb drive.
- Catalin Cimpanu
- June 22, 2017
- 07:10 AM
- 3
NSA Malware Used to Infect Windows PCs with Cryptocurrency Miner

Windows computers are being targeted with a new cryptocurrency miner that uses an NSA hacking tool to infect users' PCs. Detected under the generic name of Trojan.BtcMine.1259, this trojan was first spotted last week by Russian antivirus vendor Dr.Web.
- Catalin Cimpanu
- June 20, 2017
- 03:53 PM
- 1
TrickBot Activity Ramps up, Now Targeting CRMs and PayPal Users

Several security researchers have spotted an increase in malware campaigns distributing the TrickBot banking trojan, going after a host of targets ranging from regular e-banking applications to PayPal accounts and business CRMs.
- Catalin Cimpanu
- June 20, 2017
- 06:55 AM
- 0