Google to Pay $391 Million Privacy Fine for Secretly Tracking Users’ Location

Google to Pay $391 Million Privacy Fine for Secretly Tracking Users’ Location

,

Internet giant Google has agreed to pay a record $391.5 million to settle with 40 states in the U.S. over charges the company misled users about the collection of personal location data.
« Google misled its users into thinking they had turned off location tracking in their account settings, when, in fact, Google continued to collect their location information, » Oregon Attorney General Ellen

,

Internet giant Google has agreed to pay a record $391.5 million to settle with 40 states in the U.S. over charges the company misled users about the collection of personal location data.
« Google misled its users into thinking they had turned off location tracking in their account settings, when, in fact, Google continued to collect their location information, » Oregon Attorney General Ellen

, ,
https://thehackernews.com/2022/11/google-to-pays-391-million-privacy-fine.html

New « Earth Longzhi » APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

New « Earth Longzhi » APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

,

Entities located in East and Southeast Asia as well as Ukraine have been targeted at least since 2020 by a previously undocumented subgroup of APT41, a prolific Chinese advanced persistent threat (APT).
Cybersecurity firm Trend Micro, which christened the espionage crew Earth Longzhi, said the actor’s long-running campaign can be split into two based on the toolset deployed to attack its victims

,

Entities located in East and Southeast Asia as well as Ukraine have been targeted at least since 2020 by a previously undocumented subgroup of APT41, a prolific Chinese advanced persistent threat (APT).
Cybersecurity firm Trend Micro, which christened the espionage crew Earth Longzhi, said the actor’s long-running campaign can be split into two based on the toolset deployed to attack its victims

, ,
https://thehackernews.com/2022/11/new-earth-longzhi-apt-targets-ukraine.html

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign,

A new malicious campaign has compromised over 15,000 WordPress websites in an attempt to redirect visitors to bogus Q&A portals.
« These malicious redirects appear to be designed to increase the authority of the attacker’s sites for search engines, » Sucuri researcher Ben Martin said in a report published last week, calling it a « clever black hat SEO trick. »
The search engine poisoning technique

,

A new malicious campaign has compromised over 15,000 WordPress websites in an attempt to redirect visitors to bogus Q&A portals.
« These malicious redirects appear to be designed to increase the authority of the attacker’s sites for search engines, » Sucuri researcher Ben Martin said in a report published last week, calling it a « clever black hat SEO trick. »
The search engine poisoning technique

, ,
https://thehackernews.com/2022/11/over-15000-wordpress-sites-compromised.html

What is an External Penetration Test?

What is an External Penetration Test?,

A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. 
The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the impact would be if an attacker was successful.
Usually performed first, an external pentest (also

,

A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify security holes in your IT systems or applications. 
The aim of the test is to understand what vulnerabilities you have, how they could be exploited, and what the impact would be if an attacker was successful.
Usually performed first, an external pentest (also

, ,
https://thehackernews.com/2022/11/what-is-external-penetration-test.html

Cette faille permet à n’importe qui de déverrouiller certains smartphones Android…

Cette faille permet à n’importe qui de déverrouiller certains smartphones Android…,

Un chercheur a trouvé une faille qui permet à n’importe qui d’accéder à un Pixel, et à vraisemblablement beaucoup d’autres smartphones Android, même s’ils sont verrouillés. Après des mois sans retour réel de Google, le correctif vient d’être publié… et une prime lui a été accordée.

,

Un chercheur a trouvé une faille qui permet à n’importe qui d’accéder à un Pixel, et à vraisemblablement beaucoup d’autres smartphones Android, même s’ils sont verrouillés. Après des mois sans retour réel de Google, le correctif vient d’être publié… et une prime lui a été accordée.

, ,
https://www.01net.com/actualites/cette-faille-permet-a-nimporte-qui-de-deverrouiller-certains-smartphones-android.html

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

,

A newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry into targeted systems with the goal of mining cryptocurrency and carrying out distributed denial-of-service (DDoS) attacks.
Dubbed KmsdBot by the Akamai Security Intelligence Response Team (SIRT), the Golang-based malware has been found targeting a variety of companies ranging from gaming to

, ,
https://thehackernews.com/2022/11/new-kmsdbot-malware-hijacking-systems.html

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

,

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor’s infection chain.
Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that’s used to facilitate information theft.
« What is noteworthy is data collection from victims’ machines using

, ,
https://thehackernews.com/2022/11/worok-hackers-abuse-dropbox-api-to.html

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012

Dark Web : découvrez la folle histoire des 50 000 bitcoins volés à Silk Road en 2012,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

,

bitcoin popcorn

Il y a dix ans, Silk Road a été piraté. En exploitant une faille, un hacker a volé plus de 50 000 bitcoins sur le marché noir du dark Web, considéré comme l’eBay de la drogue. Au terme d’une longue enquête, cet impressionnant trésor en cryptomonnaies a finalement été retrouvé… au fond d’une boîte de popcorn.

, ,
https://www.01net.com/actualites/dark-web-decouvrez-folle-histoire-50000-bitcoins-voles-silk-road-2012.html

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs,

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts.
This encompasses a previously undocumented malware strain called BadBazaar and updated variants of an espionage artifact dubbed MOONSHINE by researchers from the University of Toronto’s

,

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts.
This encompasses a previously undocumented malware strain called BadBazaar and updated variants of an espionage artifact dubbed MOONSHINE by researchers from the University of Toronto’s

, ,
https://thehackernews.com/2022/11/experts-uncover-two-long-running.html

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan,

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware.
« Xenomorph is a trojan that steals credentials from banking applications on users’ devices, » Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi said in an analysis published Thursday.

,

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware.
« Xenomorph is a trojan that steals credentials from banking applications on users’ devices, » Zscaler ThreatLabz researchers Himanshu Sharma and Viral Gandhi said in an analysis published Thursday.

, ,
https://thehackernews.com/2022/11/these-two-google-play-store-apps.html