SOVA Android Banking Trojan Returns With New Capabilities and Targets

SOVA Android Banking Trojan Returns With New Capabilities and Targets,

The SOVA Android banking trojan is continuing to be actively developed with upgraded capabilities to target no less than 200 mobile applications, including banking apps and crypto exchanges and wallets, up from 90 apps when it started out.
That’s according to the latest findings from Italian cybersecurity firm Cleafy, which found newer versions of the malware sporting functionality to intercept

,

The SOVA Android banking trojan is continuing to be actively developed with upgraded capabilities to target no less than 200 mobile applications, including banking apps and crypto exchanges and wallets, up from 90 apps when it started out.
That’s according to the latest findings from Italian cybersecurity firm Cleafy, which found newer versions of the malware sporting functionality to intercept

, ,
https://thehackernews.com/2022/08/sova-android-banking-trojan-returns-new.html

Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux Systems

Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux Systems,

A now-removed rogue package pushed to the official third-party software repository for Python has been found to deploy cryptominers on Linux systems.
The module, named « secretslib » and downloaded 93 times prior to its deletion, was released to the Python Package Index (PyPI) on August 6, 2022 and is described as « secrets matching and verification made easy. »

« On a closer

,

A now-removed rogue package pushed to the official third-party software repository for Python has been found to deploy cryptominers on Linux systems.
The module, named « secretslib » and downloaded 93 times prior to its deletion, was released to the Python Package Index (PyPI) on August 6, 2022 and is described as « secrets matching and verification made easy. »

« On a closer

, ,
https://thehackernews.com/2022/08/newly-uncovered-pypi-package-drops.html

De mystérieuses failles découvertes dans les clés sans contact des voitures asiatiques

De mystérieuses failles découvertes dans les clés sans contact des voitures asiatiques,

,

Attaque RollBack

Honda, Kia, Mazda, Hyundai, Nissan… Les voitures de ces fournisseurs sont assez simples à déverrouiller en raison d’une faille dans les clés sans contact. L’origine du problème n’est pour l’instant pas connu.

L’article De mystérieuses failles découvertes dans les clés sans contact des voitures asiatiques est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/de-mysterieuses-failles-decouvertes-dans-les-cles-sans-contact-des-voitures-asiatiques.html

Tornado Cash Developer Arrested After U.S. Sanctions the Cryptocurrency Mixer

Tornado Cash Developer Arrested After U.S. Sanctions the Cryptocurrency Mixer,

Dutch authorities on Friday announced the arrest of a software developer in Amsterdam who is alleged to be working for Tornado Cash, days after the U.S. sanctioned the decentralized crypto mixing service.
The 29-year-old individual is « suspected of involvement in concealing criminal financial flows and facilitating money laundering » through the service, the Dutch Fiscal Information and

,

Dutch authorities on Friday announced the arrest of a software developer in Amsterdam who is alleged to be working for Tornado Cash, days after the U.S. sanctioned the decentralized crypto mixing service.
The 29-year-old individual is « suspected of involvement in concealing criminal financial flows and facilitating money laundering » through the service, the Dutch Fiscal Information and

, ,
https://thehackernews.com/2022/08/tornado-cash-developer-arrested-after.html

Chinese Hackers Backdoored MiMi Chat App to Target Windows, Linux, macOS Users

Chinese Hackers Backdoored MiMi Chat App to Target Windows, Linux, macOS Users,

A pair of reports from cybersecurity firms SEKOIA and Trend Micro sheds light on a new campaign undertaken by a Chinese threat actor named Lucky Mouse that involves leveraging a trojanized version of a cross-platform messaging app to backdoor systems.
Infection chains leverage a chat application called MiMi, with its installer files compromised to download and install HyperBro samples for the

,

A pair of reports from cybersecurity firms SEKOIA and Trend Micro sheds light on a new campaign undertaken by a Chinese threat actor named Lucky Mouse that involves leveraging a trojanized version of a cross-platform messaging app to backdoor systems.
Infection chains leverage a chat application called MiMi, with its installer files compromised to download and install HyperBro samples for the

, ,
https://thehackernews.com/2022/08/chinese-hackers-backdoored-mimi-chat.html

PGPP, l’appli mobile qui rend vos déplacements invisibles

PGPP, l’appli mobile qui rend vos déplacements invisibles,

,

Meilleur antivirus Android

Des chercheurs américains ont lancé le service Pretty Good Phone Privacy (PGPP) qui a la bonne idée de découpler l’authentification de l’abonné de sa connexion au réseau. Finie la géolocalisation par identifiant IMSI !

L’article PGPP, l’appli mobile qui rend vos déplacements invisibles est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/pgpp-lappli-mobile-qui-rend-vos-deplacements-invisibles.html

Researchers Uncover UEFI Secure Boot Bypass in 3 Microsoft Signed Boot Loaders

Researchers Uncover UEFI Secure Boot Bypass in 3 Microsoft Signed Boot Loaders,

A security feature bypass vulnerability has been uncovered in three signed third-party Unified Extensible Firmware Interface (UEFI) boot loaders that allow bypass of the UEFI Secure Boot feature.
« These vulnerabilities can be exploited by mounting the EFI System Partition and replacing the existing bootloader with the vulnerable one, or modifying a UEFI variable to load the vulnerable loader

,

A security feature bypass vulnerability has been uncovered in three signed third-party Unified Extensible Firmware Interface (UEFI) boot loaders that allow bypass of the UEFI Secure Boot feature.
« These vulnerabilities can be exploited by mounting the EFI System Partition and replacing the existing bootloader with the vulnerable one, or modifying a UEFI variable to load the vulnerable loader

, ,
https://thehackernews.com/2022/08/researchers-uncover-uefi-secure-boot.html

Xiaomi Phones with MediaTek Chips Found Vulnerable to Forged Payments

Xiaomi Phones with MediaTek Chips Found Vulnerable to Forged Payments,

Security flaws have been identified in Xiaomi Redmi Note 9T and Redmi Note 11 models, which could be exploited to disable the mobile payment mechanism and even forge transactions via a rogue Android app installed on the devices.
Check Point said it found the flaws in devices powered by MediaTek chipsets during a security analysis of the Chinese handset maker’s « Kinibi » Trusted Execution

,

Security flaws have been identified in Xiaomi Redmi Note 9T and Redmi Note 11 models, which could be exploited to disable the mobile payment mechanism and even forge transactions via a rogue Android app installed on the devices.
Check Point said it found the flaws in devices powered by MediaTek chipsets during a security analysis of the Chinese handset maker’s « Kinibi » Trusted Execution

, ,
https://thehackernews.com/2022/08/xiaomi-phones-with-mediatek-chips-found.html

U.S. Government Offers $10 Million Reward for Information on Conti Ransomware Gang

U.S. Government Offers $10 Million Reward for Information on Conti Ransomware Gang,

The U.S. State Department on Thursday announced a $10 million reward for information related to five individuals associated with the Conti ransomware group.
The reward offer, first reported by WIRED, is also notable for the fact that it marks the first time the face of a Conti associate, known as « Target, » has been unmasked. The four other associates have been referred to as « Tramp, » « Dandis, » « 

,

The U.S. State Department on Thursday announced a $10 million reward for information related to five individuals associated with the Conti ransomware group.
The reward offer, first reported by WIRED, is also notable for the fact that it marks the first time the face of a Conti associate, known as « Target, » has been unmasked. The four other associates have been referred to as « Tramp, » « Dandis, » « 

, ,
https://thehackernews.com/2022/08/us-government-offers-10-million-reward.html

Discord, Teams et Spotify ont été victime d’une faille de sécurité commune

Discord, Teams et Spotify ont été victime d’une faille de sécurité commune,

,

tete de mort - matrix - hacker -pirate

Des chercheurs en sécurité ont démontré qu’une brique logicielle commune à des applications comme Discord, Teams ou encore Spotify embarquait une importante faille de sécurité.

L’article Discord, Teams et Spotify ont été victime d’une faille de sécurité commune est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/discord-teams-et-spotify-ont-ete-victime-dune-faille-de-securite-commune.html