These 28+ Android Apps with 10 Million Downloads from the Play Store Contain Malware

These 28+ Android Apps with 10 Million Downloads from the Play Store Contain Malware,

As many as 30 malicious Android apps with cumulative downloads of nearly 10 million have been found on the Google Play Store distributing adware.
« All of them were built into various programs, including image-editing software, virtual keyboards, system tools and utilities, calling apps, wallpaper collection apps, and others, » Dr.Web said in a Tuesday write-up.
While masquerading as innocuous

,

As many as 30 malicious Android apps with cumulative downloads of nearly 10 million have been found on the Google Play Store distributing adware.
« All of them were built into various programs, including image-editing software, virtual keyboards, system tools and utilities, calling apps, wallpaper collection apps, and others, » Dr.Web said in a Tuesday write-up.
While masquerading as innocuous

, ,
https://thehackernews.com/2022/07/these-28-android-apps-with-10-million.html

New Ducktail Infostealer Malware Targeting Facebook Business and Ad Accounts

New Ducktail Infostealer Malware Targeting Facebook Business and Ad Accounts,

Facebook business and advertising accounts are at the receiving end of an ongoing campaign dubbed Ducktail designed to seize control as part of a financially driven cybercriminal operation. 
« The threat actor targets individuals and employees that may have access to a Facebook Business account with an information-stealer malware, » Finnish cybersecurity company WithSecure (formerly F-Secure

,

Facebook business and advertising accounts are at the receiving end of an ongoing campaign dubbed Ducktail designed to seize control as part of a financially driven cybercriminal operation. 
« The threat actor targets individuals and employees that may have access to a Facebook Business account with an information-stealer malware, » Finnish cybersecurity company WithSecure (formerly F-Secure

, ,
https://thehackernews.com/2022/07/new-ducktail-infostealer-malware.html

Taking the Risk-Based Approach to Vulnerability Patching

Taking the Risk-Based Approach to Vulnerability Patching,

Software vulnerabilities are a major threat to organizations today. The cost of these threats is significant, both financially and in terms of reputation.Vulnerability management and patching can easily get out of hand when the number of vulnerabilities in your organization is in the hundreds of thousands of vulnerabilities and tracked in inefficient ways, such as using Excel spreadsheets or

,

Software vulnerabilities are a major threat to organizations today. The cost of these threats is significant, both financially and in terms of reputation.Vulnerability management and patching can easily get out of hand when the number of vulnerabilities in your organization is in the hundreds of thousands of vulnerabilities and tracked in inefficient ways, such as using Excel spreadsheets or

, ,
https://thehackernews.com/2022/07/taking-risk-based-approach-to.html

Sabotage de fibres optiques à Paris : l’identité des auteurs est toujours un mystère

Sabotage de fibres optiques à Paris : l’identité des auteurs est toujours un mystère,

,

fibre optique

L’identité des individus ayant saboté trois câbles de fibre optique à Paris est toujours un mystère. Plusieurs mois après les faits, l’attaque semble avoir été orchestrée par un groupe de professionnels. Certains experts soupçonnent des groupes écologistes radicaux.

L’article Sabotage de fibres optiques à Paris : l’identité des auteurs est toujours un mystère est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/sabotage-fibres-optiques-paris-identite-auteurs-toujours-mystere.html

Malicious IIS Extensions Gaining Popularity Among Cyber Criminals for Persistent Access

Malicious IIS Extensions Gaining Popularity Among Cyber Criminals for Persistent Access,

Threat actors are increasingly abusing Internet Information Services (IIS) extensions to backdoor servers as a means of establishing a « durable persistence mechanism. »
That’s according to a new warning from the Microsoft 365 Defender Research Team, which said that « IIS backdoors are also harder to detect since they mostly reside in the same directories as legitimate modules used by target

,

Threat actors are increasingly abusing Internet Information Services (IIS) extensions to backdoor servers as a means of establishing a « durable persistence mechanism. »
That’s according to a new warning from the Microsoft 365 Defender Research Team, which said that « IIS backdoors are also harder to detect since they mostly reside in the same directories as legitimate modules used by target

, ,
https://thehackernews.com/2022/07/malicious-iis-extensions-gaining.html

Les hackers mettent en général 15 minutes pour exploiter une faille qui vient d’être dévoilée

Les hackers mettent en général 15 minutes pour exploiter une faille qui vient d’être dévoilée,

,

Cybersécurité, par Nick Youngson CC BY-SA 3.0 Pix4free

Les hackers dégainent vraiment plus vite que leur ombre. A partir du moment où une faille est officialisée, il faut en généralement pas plus d’un quart d’heure pour relever les premiers scans, qui permettront ensuite d’éventuellement monter une attaque.

L’article Les hackers mettent en général 15 minutes pour exploiter une faille qui vient d’être dévoilée est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/les-hackers-mettent-en-general-15-minutes-pour-exploiter-une-faille-qui-vient-detre-devoilee.html

Experts Find Similarities Between New LockBit 3.0 and BlackMatter Ransomware

Experts Find Similarities Between New LockBit 3.0 and BlackMatter Ransomware,

Cybersecurity researchers have reiterated similarities between the latest iteration of the LockBit ransomware and BlackMatter, a rebranded variant of the DarkSide ransomware strain that closed shop in November 2021.
The new version of LockBit, called LockBit 3.0 aka LockBit Black, was released in June 2022, launching a brand new leak site and what’s the very first ransomware bug bounty program,

,

Cybersecurity researchers have reiterated similarities between the latest iteration of the LockBit ransomware and BlackMatter, a rebranded variant of the DarkSide ransomware strain that closed shop in November 2021.
The new version of LockBit, called LockBit 3.0 aka LockBit Black, was released in June 2022, launching a brand new leak site and what’s the very first ransomware bug bounty program,

, ,
https://thehackernews.com/2022/07/experts-find-similarities-between.html

4 Steps Financial Industry Can Take to Cope With Their Growing Attack Surface

4 Steps Financial Industry Can Take to Cope With Their Growing Attack Surface,

The financial services industry has always been at the forefront of technology adoption, but the 2020 pandemic accelerated the widespread of mobile banking apps, chat-based customer service, and other digital tools. Adobe’s 2022 FIS Trends Report, for instance, found that more than half of the financial services and insurance firms surveyed experienced a notable increase in digital/mobile

,

The financial services industry has always been at the forefront of technology adoption, but the 2020 pandemic accelerated the widespread of mobile banking apps, chat-based customer service, and other digital tools. Adobe’s 2022 FIS Trends Report, for instance, found that more than half of the financial services and insurance firms surveyed experienced a notable increase in digital/mobile

, ,
https://thehackernews.com/2022/07/4-steps-financial-industry-can-take-to.html

Hackers Increasingly Using WebAssembly Coded Cryptominers to Evade Detection

Hackers Increasingly Using WebAssembly Coded Cryptominers to Evade Detection,

As many as 207 websites have been infected with malicious code designed to launch a cryptocurrency miner by leveraging WebAssembly (Wasm) on the browser.
Web security company Sucuri, which published details of the campaign, said it launched an investigation after one of its clients had their computer slowed down significantly every time upon navigating to their own WordPress portal.
This

,

As many as 207 websites have been infected with malicious code designed to launch a cryptocurrency miner by leveraging WebAssembly (Wasm) on the browser.
Web security company Sucuri, which published details of the campaign, said it launched an investigation after one of its clients had their computer slowed down significantly every time upon navigating to their own WordPress portal.
This

, ,
https://thehackernews.com/2022/07/hackers-increasingly-using-webassembly.html

Critical FileWave MDM Flaws Open Organization-Managed Devices to Remote Hackers

Critical FileWave MDM Flaws Open Organization-Managed Devices to Remote Hackers,

FileWave’s mobile device management (MDM) system has been found vulnerable to two critical security flaws that could be leveraged to carry out remote attacks and seize control of a fleet of devices connected to it.
« The vulnerabilities are remotely exploitable and enable an attacker to bypass authentication mechanisms and gain full control over the MDM platform and its managed devices, » Claroty

,

FileWave’s mobile device management (MDM) system has been found vulnerable to two critical security flaws that could be leveraged to carry out remote attacks and seize control of a fleet of devices connected to it.
« The vulnerabilities are remotely exploitable and enable an attacker to bypass authentication mechanisms and gain full control over the MDM platform and its managed devices, » Claroty

, ,
https://thehackernews.com/2022/07/critical-filewave-mdm-flaws-open.html