#CitizenLab

Western, Russian Civil Society Targeted in Sophisticated Phishing Attacks 

by

August 16, 2024 at 09:21AM Two Russia-linked threat actors have been targeting entities critical of Russia through ongoing spear-phishing campaigns since 2023. Phishing emails impersonating Proton email service staff members have been sent to international NGOs, media organizations, Russian opposition figures, and US and European NGOs, posing serious risks to the targets. The attacks involve … Read more

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

by

April 24, 2024 at 05:45AM Security vulnerabilities in cloud-based pinyin keyboard apps, discovered by Citizen Lab, could expose users’ keystrokes to exploitation. Weaknesses found in apps from major vendors affect close to one billion users. Critical flaws in encryption protocols allow adversaries to decrypt keystrokes passively. Most vendors have addressed the issues, but users are … Read more