Hackers Using Rogue Versions of KeePass and SolarWinds Software to Distribute RomCom RAT

Hackers Using Rogue Versions of KeePass and SolarWinds Software to Distribute RomCom RAT,

The operators of RomCom RAT are continuing to evolve their campaigns with rogue versions of software such as SolarWinds Network Performance Monitor, KeePass password manager, and PDF Reader Pro.
Targets of the operation consist of victims in Ukraine and select English-speaking countries like the U.K.
« Given the geography of the targets and the current geopolitical situation, it’s unlikely that

,

The operators of RomCom RAT are continuing to evolve their campaigns with rogue versions of software such as SolarWinds Network Performance Monitor, KeePass password manager, and PDF Reader Pro.
Targets of the operation consist of victims in Ukraine and select English-speaking countries like the U.K.
« Given the geography of the targets and the current geopolitical situation, it’s unlikely that

, ,
https://thehackernews.com/2022/11/hackers-using-rogue-versions-of-keepass.html

New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users’ Data

New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users’ Data

,

Popular short-form video-sharing service TikTok is revising its privacy policy for European users to make it explicitly clear that user data can be accessed by some employees from across the world, including China.
The ByteDance-owned platform, which currently stores European user data in the U.S. and Singapore, said the revision is part of its ongoing data governance efforts to limit employee

,

Popular short-form video-sharing service TikTok is revising its privacy policy for European users to make it explicitly clear that user data can be accessed by some employees from across the world, including China.
The ByteDance-owned platform, which currently stores European user data in the U.S. and Singapore, said the revision is part of its ongoing data governance efforts to limit employee

, ,
https://thehackernews.com/2022/11/new-tiktok-privacy-policy-confirms.html

Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software

Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software,

Multiple vulnerabilities have been disclosed in Checkmk IT Infrastructure monitoring software that could be chained together by an unauthenticated, remote attacker to fully take over affected servers. 
« These vulnerabilities can be chained together by an unauthenticated, remote attacker to gain code execution on the server running Checkmk version 2.1.0p10 and lower, » SonarSource researcher

,

Multiple vulnerabilities have been disclosed in Checkmk IT Infrastructure monitoring software that could be chained together by an unauthenticated, remote attacker to fully take over affected servers. 
« These vulnerabilities can be chained together by an unauthenticated, remote attacker to gain code execution on the server running Checkmk version 2.1.0p10 and lower, » SonarSource researcher

, ,
https://thehackernews.com/2022/11/multiple-vulnerabilities-reported-in.html

These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites

These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites,

A set of four Android apps released by the same developer has been discovered directing victims to malicious websites as part of an adware and information-stealing campaign.
The apps, published by a developer named Mobile apps Group and currently available on the Play Store, have been collectively downloaded over one million times.
According to Malwarebytes, the websites are designed to generate

,

A set of four Android apps released by the same developer has been discovered directing victims to malicious websites as part of an adware and information-stealing campaign.
The apps, published by a developer named Mobile apps Group and currently available on the Play Store, have been collectively downloaded over one million times.
According to Malwarebytes, the websites are designed to generate

, ,
https://thehackernews.com/2022/11/these-android-apps-with-million-play.html

Inside Raccoon Stealer V2

Inside Raccoon Stealer V2,

Raccoon Stealer is back on the news again. US officials arrested Mark Sokolovsky, one of the malware actors behind this program. In July 2022, after several months of the shutdown, a Raccoon Stealer V2 went viral. Last week, the Department of Justice’s press release stated that the malware collected 50 million credentials.
This article will give a quick guide to the latest info stealer’s version

,

Raccoon Stealer is back on the news again. US officials arrested Mark Sokolovsky, one of the malware actors behind this program. In July 2022, after several months of the shutdown, a Raccoon Stealer V2 went viral. Last week, the Department of Justice’s press release stated that the malware collected 50 million credentials.
This article will give a quick guide to the latest info stealer’s version

, ,
https://thehackernews.com/2022/11/inside-raccoon-stealer-v2.html

Désinstallez ces quatre applications mobiles qui affichent des pubs et volent vos données personnelles

Désinstallez ces quatre applications mobiles qui affichent des pubs et volent vos données personnelles,

play store android

Un développeur mal intentionné a publié quatre applications malveillantes qui ont été téléchargées plus d’un million de fois. Nous vous conseillons de les désinstaller immédiatement.

,

play store android

Un développeur mal intentionné a publié quatre applications malveillantes qui ont été téléchargées plus d’un million de fois. Nous vous conseillons de les désinstaller immédiatement.

, ,
https://www.01net.com/actualites/desinstallez-ces-4-applications-mobiles-qui-affichent-des-pubs-et-volent-vos-donnees-personnelles.html

Experts Warn of SandStrike Android Spyware Infecting Devices via Malicious VPN App

Experts Warn of SandStrike Android Spyware Infecting Devices via Malicious VPN App,

A previously undocumented Android spyware campaign has been found striking Persian-speaking individuals by masquerading as a seemingly harmless VPN application.
Russian cybersecurity firm Kaspersky is tracking the campaign under the moniker SandStrike. It has not been attributed to any particular threat group.
« SandStrike is distributed as a means to access resources about the Bahá’í religion 

,

A previously undocumented Android spyware campaign has been found striking Persian-speaking individuals by masquerading as a seemingly harmless VPN application.
Russian cybersecurity firm Kaspersky is tracking the campaign under the moniker SandStrike. It has not been attributed to any particular threat group.
« SandStrike is distributed as a means to access resources about the Bahá’í religion 

, ,
https://thehackernews.com/2022/11/experts-warn-of-sandstrike-android.html

Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories

Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories,

File hosting service Dropbox on Tuesday disclosed that it was the victim of a phishing campaign that allowed unidentified threat actors to gain unauthorized access to 130 of its source code repositories on GitHub.
« These repositories included our own copies of third-party libraries slightly modified for use by Dropbox, internal prototypes, and some tools and configuration files used by the

,

File hosting service Dropbox on Tuesday disclosed that it was the victim of a phishing campaign that allowed unidentified threat actors to gain unauthorized access to 130 of its source code repositories on GitHub.
« These repositories included our own copies of third-party libraries slightly modified for use by Dropbox, internal prototypes, and some tools and configuration files used by the

, ,
https://thehackernews.com/2022/11/dropbox-breach-hackers-unauthorizedly.html

Dropbox : une faille de sécurité provoque le vol de milliers de noms et d’adresses e-mail

Dropbox : une faille de sécurité provoque le vol de milliers de noms et d’adresses e-mail,

Un piratage sur un compte GitHub utilisé par Dropbox a conduit au vol de quelques milliers de noms et d’adresses e-mail. Les pirates ont employé une technique classique d’hameçonnage.

,

Un piratage sur un compte GitHub utilisé par Dropbox a conduit au vol de quelques milliers de noms et d’adresses e-mail. Les pirates ont employé une technique classique d’hameçonnage.

, ,
https://www.01net.com/actualites/dropbox-une-faille-de-securite-provoque-le-vol-de-milliers-de-noms-et-dadresses-e-mail.html

OpenSSL Releases Patch for 2 New High-Severity Vulnerabilities

OpenSSL Releases Patch for 2 New High-Severity Vulnerabilities,

The OpenSSL project has rolled out fixes to contain two high-severity flaws in its widely used cryptography library that could result in a denial-of-service (DoS) and remote code execution.
The issues, tracked as CVE-2022-3602 and CVE-2022-3786, have been described as buffer overrun vulnerabilities that can be triggered during X.509 certificate verification by supplying a specially-crafted email

,

The OpenSSL project has rolled out fixes to contain two high-severity flaws in its widely used cryptography library that could result in a denial-of-service (DoS) and remote code execution.
The issues, tracked as CVE-2022-3602 and CVE-2022-3786, have been described as buffer overrun vulnerabilities that can be triggered during X.509 certificate verification by supplying a specially-crafted email

, ,
https://thehackernews.com/2022/11/just-in-openssl-releases-patch-for-2.html