Attack on Zygote: a new twist in the evolution of mobile threats
...information is sent to the cybercriminals’ server whose address the Trojan receives from a list written in the code: bridgeph2.zgxuanhao.com:8088 bridgeph2.zgxuanhao.com:8088 bridgeph3.zgxuanhao.com:8088 bridgeph3.zgxuanhao.com:8088 bridgeph4.zgxuanhao.com:8088 bridgeph2.viewvogue.com:8088 bridgeph3.viewvogue.com:8088 bridgeph3.viewvogue.com:8088 bridgeph4.viewvogue.com:8088 Or, if... more…Ztorg: money for infecting your smartphone
...of new users each day! For example, com.fluent.led.compass had 10,000–50,000 installations the day I found and reported it to Google. However, it still wasn’t deleted from Google Play the next... more…SPAM Hack Targets WordPress Core Install Directories
...www teer99 com teer code juwai teer barmateer wwwTEER ladrymbai teer common number shilling ter teershilong teercompany com shllong teer tree game mobile blog www teer game heck in teerfb... more…FIN7.5: the infamous cybercrime rig “FIN7” continues its activities
...of wscript.exe or sctasks.exe copies, etc. wscript.exe copy sctasks copy Task name C2 byzNne10.exe byzNne17.exe TaskbyzNne logitech-cdn.com c9FGG10.exe c9FGG17.exe Taskc9FGG logitech-cdn.com zEsb10.exe zEsb17.exe TaskzEsb servicebing-cdn.com IOCs extracted from docs which... more…Website Mesh Networks Distributing Malware
...web sites: X.com, Y.com and Z.com. Homer injects malware into X.com that then loads from Y.com. The malware from Y.com is loaded from Z.com and the one from Z.com is... more…Blog Comments – Analysing 100,000 Comments and Spammers
...field, they add a link to their own web site (which can increase their page rankings, visitors, etc). Example: [author] => Mary Jane [email] => info@fabfunapps.com [url] => http://fabfunapps.com [comment]... more…Conditional Malicious iFrame Targeting WordPress Web Sites
...one: sitylertudes.abbotaleweekendgetaway.com HTTP/1.1 302 Found Server: nginx Date: Sat, 13 Sep 2014 02:05:29 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 370 Connection: keep-alive Set-Cookie: ehihm=7MMcADE2AAIAAgBpphNU__9pphNUQAABAAAAaaYTVAA-; expires=Sun, 13-Sep-2015 02:05:29 GMT; path=/; domain=dolberop.chrisxp.us Location:... more…The “EyePyramid” attacks
...domains outlined by the police report follow: E-mail Addresses used for exfiltration gpool@hostpenta[.]com hanger@hostpenta[.]com hostpenta@hostpenta[.]com purge626@gmail[.]com tip848@gmail[.]com dude626@gmail[.]com octo424@gmail[.]com tim11235@gmail[.]com plars575@gmail[.]com Command-and-Control Servers eyepyramid[.]com hostpenta[.]com ayexisfitness[.]com enasrl[.]com eurecoove[.]com marashen[.]com millertaylor[.]com... more…New Version of XLoader That Disguises as Android Apps and an iOS Profile Holds New Links to FakeSpy
...to apps, and detects and blocks malware and access to fraudulent websites. Indicators of Compromise SHA256 Package App label 332e68d865009d627343b89a5744843e3fde4ae870193f36b82980363439a425 ufD.wykyx.vlhvh SEX kr porn 403401aa71df1830d294b78de0e5e867ee3738568369c48ffafe1b15f3145588 ufD.wyjyx.vahvh 佐川急便 466dafa82a4460dcad722d2ad9b8ca332e9a896fc59f06e16ebe981ad3838a6b com.dhp.ozqh Facebook... more…Darkleech + Bitly.com = Insightful Statistics
...Here is the VirusTotal analysis of the .so file that does it. Looks the same. But you’ll notice that now it uses shortened bitly.com links in the iFrames. Bitly (aka... more…Website Malware – Mobile Redirect to BaDoink Porn App
...on Twitter at Sucuri Security or Sucuri Labs. Read more: Website Malware – Mobile Redirect to BaDoink Porn App Incoming search terms badoink virus Www waptricapps com teer shilon mornig... more…Data collectors
...youtube.com, kijiji.ca, msn.com, ebay.com, zillow.com, weather.com, macys.com, kohls.com, and facebook.com. In second place in North America is AOL Advertising; this tracker was blocked most frequently by our users on msn.com,... more…Data collectors
...youtube.com, kijiji.ca, msn.com, ebay.com, zillow.com, weather.com, macys.com, kohls.com, and facebook.com. In second place in North America is AOL Advertising; this tracker was blocked most frequently by our users on msn.com,... more…Data collectors
...youtube.com, kijiji.ca, msn.com, ebay.com, zillow.com, weather.com, macys.com, kohls.com, and facebook.com. In second place in North America is AOL Advertising; this tracker was blocked most frequently by our users on msn.com,... more…Data collectors
...youtube.com, kijiji.ca, msn.com, ebay.com, zillow.com, weather.com, macys.com, kohls.com, and facebook.com. In second place in North America is AOL Advertising; this tracker was blocked most frequently by our users on msn.com,... more…Data collectors
...youtube.com, kijiji.ca, msn.com, ebay.com, zillow.com, weather.com, macys.com, kohls.com, and facebook.com. In second place in North America is AOL Advertising; this tracker was blocked most frequently by our users on msn.com,... more…Kam dál?
- New MongoDB field-level encryption can help prevent data breaches
- French police want to ban Tor, public Wi-Fi
- Cybercrime’s Most Wanted: Four Mobile Threats that Might Surprise You
- EFF launches security vulnerability disclosure program
- Yelp sues Revleap for claiming it sells good reviews, buries the bad ones
- Apple Addresses HSTS User Tracking in WebKit
- Oracle Seeks $9.3 Billion For Google’s Use Of Java In Android
- Canvas maintenance to take place November 6 from 5:00 a.m. to 7:00 a.m. ET
- 66 percent of SMBs don’t believe they’re vulnerable to a cyberattack
- TLT Storage Area Network maintenance 3/6/2018