November 28, 2023 at 06:24AM Account credentials are highly valuable in cybercrime, with stolen credentials posing a significant risk to organizations. External parties are responsible for 83% of breaches, with 49% involving stolen credentials. Phishing is a common method of credential theft, with threat actors using multi-channel attacks and targeting mobile devices. Phishing-as-a-service (PhaaS) has … Read more
November 10, 2023 at 12:45AM A watering hole attack has targeted Urdu-speaking readers in the Gilgit-Baltistan region via the Hunza News website. The attack delivers a new spyware called Kamran, which is disguised as an Android app. The malware collects sensitive information from infected devices and uploads it to a command-and-control server. Kamran lacks remote … Read more
November 4, 2023 at 05:24AM Google is introducing an “Independent security review” badge in the Play Store’s Data safety section for Android apps. This badge will be given to apps that have undergone a Mobile Application Security Assessment (MASA) audit. The goal is to provide users with more transparency and help them make informed choices … Read more
November 3, 2023 at 09:42AM Researchers have discovered modified versions of WhatsApp for Android that contain spyware called CanesSpy. These versions are being spread through sketchy websites and Telegram channels primarily used by Arabic and Azerbaijani speakers. The spyware is designed to activate when the phone is turned on or charging, and it sends information … Read more
October 31, 2023 at 11:13AM Canada has banned the use of Kaspersky security products and Tencent’s WeChat app on mobile devices used by government employees due to network and national security concerns. The ban will take effect on October 30, 2023, and the government has stated that there is no evidence of government information being … Read more
October 26, 2023 at 06:56PM Over 2 million Android users were affected by malicious Google Play apps that pushed intrusive ads while remaining hidden on devices. Dr. Web’s analysts identified trojans associated with the ‘FakeApp,’ ‘Joker,’ and ‘HiddenAds’ malware families. Notable apps included Super Skibydi Killer, Agent Shooter, and Eternal Maze. These apps generated revenue … Read more
October 20, 2023 at 02:11PM Burkina Faso aims to improve mobile security by implementing a new bill that restricts users to holding a maximum of two SIM cards from a single mobile provider. SIM cards will only be sold at approved agencies. This measure aims to combat SIM farms that are used for spam messaging. … Read more
October 19, 2023 at 08:15AM Google has updated its Play Protect feature to include real-time scanning at the code level. This enhancement allows for the detection of emerging threats prior to downloading and installing apps on Android devices. The new safeguard aims to protect users from malicious apps that can alter their code to avoid … Read more
October 16, 2023 at 09:15AM The Android banking trojan, SpyNote, has been analyzed, revealing its various information-gathering capabilities. Spread through SMS phishing campaigns, the malware tricks victims into installing it by clicking on embedded links. It hides its presence on the device, seeks accessibility permissions, and can record audio, phone calls, and keystrokes. The malware … Read more