Le harcèlement par Apple AirTag prend de l’ampleur

Le harcèlement par Apple AirTag prend de l’ampleur,

Les plaintes se multiplient dans les postes de police américains. La balise est généralement cachée dans la voiture de la victime. Et l’auteur est souvent un ex-conjoint jaloux et revanchard.

,

Les plaintes se multiplient dans les postes de police américains. La balise est généralement cachée dans la voiture de la victime. Et l’auteur est souvent un ex-conjoint jaloux et revanchard.

, ,
https://www.01net.com/actualites/le-harcelement-par-apple-airtag-prend-de-l-ampleur-2055842.html

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild,

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks.
« Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim’s machines to look like the instant messaging application ‘Telegram,' » Zscaler ThreatLabz

,

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks.
« Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim’s machines to look like the instant messaging application ‘Telegram,' » Zscaler ThreatLabz

, ,
https://thehackernews.com/2022/04/researchers-warn-of-ffdroider-and.html

Microsoft’s New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

Microsoft’s New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

,

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022.
« This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost, » said Lior Bela, senior product marketing manager at Microsoft, in a post last week. « The second Tuesday of every month will be

,

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022.
« This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost, » said Lior Bela, senior product marketing manager at Microsoft, in a post last week. « The second Tuesday of every month will be

, ,
https://thehackernews.com/2022/04/microsofts-new-autopatch-feature-to.html

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware,

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022.
« The exploitation allows threat actors to download the Mirai sample to the ‘/tmp’ folder and execute them after permission change using ‘chmod,' » Trend Micro researchers Deep Patel, Nitesh

,

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022.
« The exploitation allows threat actors to download the Mirai sample to the ‘/tmp’ folder and execute them after permission change using ‘chmod,' » Trend Micro researchers Deep Patel, Nitesh

, ,
https://thehackernews.com/2022/04/hackers-exploiting-spring4shell.html

Chinese Hacker Groups Continue to Target Indian Power Grid Assets

Chinese Hacker Groups Continue to Target Indian Power Grid Assets,

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light.
Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future’s Insikt Group, a sophisticated remote access trojan which has been dubbed a « masterpiece

,

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light.
Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future’s Insikt Group, a sophisticated remote access trojan which has been dubbed a « masterpiece

, ,
https://thehackernews.com/2022/04/chinese-hacker-groups-continue-to.html

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity,

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year.
« At least some members of the new BlackCat group have links to the BlackMatter group, because they modified and reused a custom exfiltration tool […] and which has only been observed in

,

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year.
« At least some members of the new BlackCat group have links to the BlackMatter group, because they modified and reused a custom exfiltration tool […] and which has only been observed in

, ,
https://thehackernews.com/2022/04/researchers-connect-blackcat-ransomware.html

Google Play Store : comment des espions américains auraient collecté des données de façon abusive

Google Play Store : comment des espions américains auraient collecté des données de façon abusive,

Un étrange kit de développement a collecté des données sensibles dans une dizaine d’applis, téléchargées par plus de 60 millions de personnes. Des indices suggèrent l’implication d’agences gouvernementales.

,

Un étrange kit de développement a collecté des données sensibles dans une dizaine d’applis, téléchargées par plus de 60 millions de personnes. Des indices suggèrent l’implication d’agences gouvernementales.

, ,
https://www.01net.com/actualites/google-play-store-comment-des-espions-americains-auraient-collecte-des-donnees-de-facon-abusive-2055830.html

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States,

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a « high-level hacker » in the financially motivated group FIN7.
Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.

,

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a « high-level hacker » in the financially motivated group FIN7.
Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.

, ,
https://thehackernews.com/2022/04/ukrainian-fin7-hacker-gets-5-year.html

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine,

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia’s military intelligence service, with the goal of neutralizing its attacks on Ukraine.
« We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium’s current use of these domains and enable

,

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia’s military intelligence service, with the goal of neutralizing its attacks on Ukraine.
« We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium’s current use of these domains and enable

, ,
https://thehackernews.com/2022/04/microsoft-obtains-court-order-to-take.html

New Octo Banking Trojan Spreading via Fake Apps on Google Play Store

New Octo Banking Trojan Spreading via Fake Apps on Google Play Store,

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities.
The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a « lite » replacement for its Exobot predecessor, Dutch mobile security firm

,

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities.
The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a « lite » replacement for its Exobot predecessor, Dutch mobile security firm

, ,
https://thehackernews.com/2022/04/new-octo-banking-trojan-spreading-via.html