Google Play Store : comment des espions américains auraient collecté des données de façon abusive

Google Play Store : comment des espions américains auraient collecté des données de façon abusive,

Un étrange kit de développement a collecté des données sensibles dans une dizaine d’applis, téléchargées par plus de 60 millions de personnes. Des indices suggèrent l’implication d’agences gouvernementales.

,

Un étrange kit de développement a collecté des données sensibles dans une dizaine d’applis, téléchargées par plus de 60 millions de personnes. Des indices suggèrent l’implication d’agences gouvernementales.

, ,
https://www.01net.com/actualites/google-play-store-comment-des-espions-americains-auraient-collecte-des-donnees-de-facon-abusive-2055830.html

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States,

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a « high-level hacker » in the financially motivated group FIN7.
Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.

,

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual’s criminal work as a « high-level hacker » in the financially motivated group FIN7.
Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.

, ,
https://thehackernews.com/2022/04/ukrainian-fin7-hacker-gets-5-year.html

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine

Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine,

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia’s military intelligence service, with the goal of neutralizing its attacks on Ukraine.
« We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium’s current use of these domains and enable

,

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia’s military intelligence service, with the goal of neutralizing its attacks on Ukraine.
« We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium’s current use of these domains and enable

, ,
https://thehackernews.com/2022/04/microsoft-obtains-court-order-to-take.html

New Octo Banking Trojan Spreading via Fake Apps on Google Play Store

New Octo Banking Trojan Spreading via Fake Apps on Google Play Store,

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities.
The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a « lite » replacement for its Exobot predecessor, Dutch mobile security firm

,

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities.
The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a « lite » replacement for its Exobot predecessor, Dutch mobile security firm

, ,
https://thehackernews.com/2022/04/new-octo-banking-trojan-spreading-via.html

Comment le FBI a cassé un botnet très sophistiqué de l’armée russe

Comment le FBI a cassé un botnet très sophistiqué de l’armée russe,

Les agents américains se sont connectés à distance à certains équipements infectés pour supprimer le malware et déconstruire l’architecture du réseau de machines zombies.

,

Les agents américains se sont connectés à distance à certains équipements infectés pour supprimer le malware et déconstruire l’architecture du réseau de machines zombies.

, ,
https://www.01net.com/actualites/comment-le-fbi-a-casse-un-botnet-tres-sophistique-de-l-armee-russe-2055820.html

First Malware Targeting AWS Lambda Serverless Platform Discovered

First Malware Targeting AWS Lambda Serverless Platform Discovered,

A first-of-its-kind malware targeting Amazon Web Services’ (AWS) Lambda serverless computing platform has been discovered in the wild.
Dubbed « Denonia » after the name of the domain it communicates with, « the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls, » Cado Labs researcher Matt Muir said

,

A first-of-its-kind malware targeting Amazon Web Services’ (AWS) Lambda serverless computing platform has been discovered in the wild.
Dubbed « Denonia » after the name of the domain it communicates with, « the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls, » Cado Labs researcher Matt Muir said

, ,
https://thehackernews.com/2022/04/first-malware-targeting-aws-lambda.html

Hamas-linked Hackers Targeting High-Ranking Israelis Using ‘Catfish’ Lures

Hamas-linked Hackers Targeting High-Ranking Israelis Using ‘Catfish’ Lures

,

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an « elaborate campaign » targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations.
« The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and

,

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an « elaborate campaign » targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations.
« The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and

, ,
https://thehackernews.com/2022/04/hamas-linked-hackers-targeting-high.html

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022,

During the last week of March, three major tech companies – Microsoft, Okta, and HubSpot – reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on

,

During the last week of March, three major tech companies – Microsoft, Okta, and HubSpot – reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on

, ,
https://thehackernews.com/2022/04/into-breach-breaking-down-3-saas-app.html

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps,

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot.
« SharkBot steals credentials and banking information, » Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. « This malware implements a geofencing feature and evasion techniques, which makes it

,

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot.
« SharkBot steals credentials and banking information, » Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. « This malware implements a geofencing feature and evasion techniques, which makes it

, ,
https://thehackernews.com/2022/04/sharkbot-banking-trojan-resurfaces-on.html

Hydra, plus grande place de marché du Darknet et machine à blanchir les bitcoins, démantelée par la police

Hydra, plus grande place de marché du Darknet et machine à blanchir les bitcoins, démantelée par la police,

Cette place de marché proposait non seulement des produits illicites, mais aussi des services financiers dont les pirates russes étaient particulièrement friands.

,

Cette place de marché proposait non seulement des produits illicites, mais aussi des services financiers dont les pirates russes étaient particulièrement friands.

, ,
https://www.01net.com/actualites/hydra-plus-grande-place-de-marche-du-darknet-et-machine-a-blanchir-les-bitcoins-demantelee-par-la-police-2055811.html