A North Korea-linked APT group tracked as Sun Team has targeted North Korean deflectors with a malicious app that was published in the official Google Play store. A North Korea-linked APT group tracked as Sun Team has targeted North Korean deflectors with a malicious app that was published in the official Google Play store. The campaign, […]
The ZipperDown Vulnerability could affect roughly 10% of iOS Apps
Experts from Chinese jailbreakers Pangu Lab, have recently discovered the ZipperDown flaw that could affect roughly 10% of iOS Apps. ZipperDown, is a recently discovered vulnerability that could affect thousands of iOS apps and maybe also Android users. The ZipperDown flaw was first reported by experts from Chinese jailbreakers Pangu Lab, that described it as described as a […]
Experts propose a new variation of the Spectre attack to recover data from System Management Mode
Researchers from Eclypsium proposed a new variation of the Spectre attack that can allow attackers to recover data stored inside CPU System Management Mode. Security experts from Eclypsium have devised a new variation of the Spectre attack that can allow attackers to recover data stored inside CPU System Management Mode (SMM) (aka […]
« Wicked » Variant of Mirai Botnet Emerges
A new variant of the Mirai Internet of Things (IoT) botnet has emerged, which features new exploits in its arsenal and distributing a new bot, Fortinet researchers warn. Called Wicked, based on strings found in the code, the malware has added three new exploits compared to Mirai and appears to […]
Election d’un nouveau bureau directeur pour le chapitre Tunisien d’Internet Society
ISOC Tunisie vient d’annoncer l’élection de son nouveau bureau sous la présidence de Mr. Haythem El Mir, pour un mandat de deux ans, succédant à Mr. Mondher Laabidi et Mr. Khaled Koubaa qui était le premier président fondateur. Il est à rappeler que ISOC est une organisation internationale fondée en 1992 […]
PANDA BANKING TROJAN DIVERSIFIES INTO CRYPTOCURRENCY, PORN, OTHER TARGETS
The Panda banking trojan, a spin-off from the infamous Zeus malware, is widening its net to attack more than just financial services targets, as seen in three ongoing campaigns discovered in May. The Windows-focused Panda is far from the cuddly thing its name would suggest. It has a full arsenal […]
Attention PGP Users: New Vulnerabilities Require You To Take Action Now
A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. EFF has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure […]
Nigelthorn malware infected over 100,000 systems abusing Chrome extensions
The Nigelthorn malware has already infected over 100,000 systems in 100 countries by abusing a Google Chrome extension called Nigelify. A new strain of malware, dubbed Nigelthorn malware because it abuses a Google Chrome extension called Nigelify, has already infected over 100,000 systems in 100 countries, most of them in the Philippines, Venezuela, and […]
Mexican Banks Hacked – Leading To Large Cash Withdrawals
Several banks in Mexico have experienced large cash transfers in recent weeks after cyber-criminals infiltrated some financial institutions which led to unauthorized transactions, as claimed by the central bank in an interview with Bloomberg. Banco de Mexico has zeroed in on 5 financial institutions that have had their external connection to […]
Mining passwords from dozens of public Trello boards
Trello, when an error in the publishing strategy is able to put at risk the private data of a huge community of unaware users. A “Security enthusiastic” found a vulnerability in the Trello web management and now with a simple dork is possible to query to mine passwords from dozens […]