Technology

Jan 10, 2023Ravie LakshmananAdvanced Persistent Threat The advanced persistent threat (APT) group known as StrongPity has targeted Android users with a trojanized version of the Telegram app through a fake website that impersonates a video chat service called Shagle. “A copycat website, mimicking the Shagle service, is used to distribute StrongPity’s mobile backdoor app,” ESET
0 Comments
Jan 10, 2023Ravie LakshmananSoftware Security / Supply Chain A high-severity security flaw has been disclosed in the open source jsonwebtoken (JWT) library that, if successfully exploited, could lead to remote code execution on a target server. “By exploiting this vulnerability, attackers could achieve remote code execution (RCE) on a server verifying a maliciously crafted JSON
0 Comments
Jan 09, 2023Ravie LakshmananKubernetes / Cryptojacking The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access to Kubernetes environments. A second initial access vector technique entails the use of vulnerable images, Sunders Bruskin, security researcher at Microsoft Defender for Cloud, said in a report
0 Comments
Jan 09, 2023The Hacker NewsSaaS Security / SSPM Solution Earlier this year, threat actors infiltrated Mailchimp, the popular SaaS email marketing platform. They viewed over 300 Mailchimp customer accounts and exported audience data from 102 of them. The breach was preceded by a successful phishing attempt and led to malicious attacks against Mailchimp’s customers’ end
0 Comments
Jan 06, 2023Ravie LakshmananOnline Safety / Privacy Popular instant messaging service WhatsApp has launched support for proxy servers in the latest version of its Android and iOS apps, letting users circumvent government-imposed censorship and internet shutdowns. “Choosing a proxy enables you to connect to WhatsApp through servers set up by volunteers and organizations around the
0 Comments
iQoo 11 and iQoo Neo 7 SE were launched in China recently. Now, an unknown iQoo smartphone with model number V2230EA has been spotted on multiple certifications websites including China’s TENAA certification site, suggesting that the phone may launch soon. It appears to have a 6.51-inch display, a 4,910mAh battery and dual rear cameras led
0 Comments
Jan 08, 2023Ravie LakshmananCyberespionage / Threat Analysis The Russian cyberespionage group known as Turla has been observed piggybacking on attack infrastructure used by a decade-old malware to deliver its own reconnaissance and backdoor tools to targets in Ukraine. Google-owned Mandiant, which is tracking the operation under the uncategorized cluster moniker UNC4210, said the hijacked servers
0 Comments
Jan 06, 2023Ravie LakshmananEndpoint Security/ Malware A variant of the infamous Dridex banking malware has set its sights on Apple’s macOS operating system using a previously undocumented infection method, according to latest research. It has “adopted a new technique to deliver documents embedded with malicious macros to users without having to pretend to be invoices
0 Comments
Motorola will bring satellite messaging service on its upcoming Defy rugged smartphone in Q1 2023. The company has partnered with Bullitt to bring satellite connectivity to its Android devices. Satellite connectivity was introduced by Apple with iPhone 14 series. The feature on iPhone 14 as well as iPhone 14Pro model allows users to make an
0 Comments
Jan 06, 2023Ravie LakshmananEndpoint Security / Cyber Threat Microsoft has shed light on four different ransomware families – KeRanger, FileCoder, MacRansom, and EvilQuest – that are known to impact Apple macOS systems. “While these malware families are old, they exemplify the range of capabilities and malicious behavior possible on the platform,” the tech giant’s Security
0 Comments
Honor 80 Pro Straight Screen Edition was launched in China as the latest offering from the brand. The new smartphone in the Honor 80 series features similar specifications to the regular Honor 80 Pro. The new variant comes in three colour options and has a 6.67-inch OLED display. The Honor 80 Pro Straight Screen Edition
0 Comments
Jan 06, 2023Ravie LakshmananCryptocurrency / GitHub A South Africa-based threat actor known as Automated Libra has been observed employing CAPTCHA bypass techniques to create GitHub accounts in a programmatic fashion as part of a freejacking campaign dubbed PURPLEURCHIN. The group “primarily targets cloud platforms offering limited-time trials of cloud resources in order to perform their
0 Comments
OnePlus Pad, the long-rumoured tablet offering from the Chinese tech company has reportedly entered testing in India. The new Android tablet is said to launch in the country alongside the OnePlus 11R. The tablet is internally codenamed ‘Aries.’ Past leaks had indicated that the OnePlus Pad would be powered by a Qualcomm Snapdragon 865 SoC,
0 Comments
On January 3rd, a new study on teens and social media hit the headlines in places like StudyFinds.org and the New York Times.  The headline in StudyFinds was scary: it warned of a “social disaster.” And it explained that “Children who frequently check social media face significant brain changes.” But the headline was wrong.  Dead wrong. Here’s
0 Comments