Nokia to offer paid upgrade to Lumia-only music service
A few months after jumping in to the free music streaming sector, Nokia is getting ready to give its Lumia-only service a jump-start with a premium upgrade. Nokia Music+, an upgrade to the free Mix Radio service that Nokia launched last September, will offer Lumia owners unlimited skips and unlimited downloads, the Finnish handset maker […] more…First Active Attack Exploiting CVE-2019-2215 Found on Google Play, Linked to SideWinder APT Group
by Ecular Xu and Joseph C Chen We found three malicious apps in the Google Play Store that work together to compromise a victim’s device and collect user information. One of these apps, called Camero, exploits CVE-2019-2215, a vulnerability that exists in Binder (the main Inter-Process Communication system in Android). This is the first known active […] more…The 5G reality
Mobile World Congress has come and gone. With over 100,000 attendees at the show, people gathered around the impressive booths to get a glimpse at what the world’s biggest mobile brands had to offer in 2017. There was definitely a theme of nostalgia at play with the highly anticipated return of the classic Nokia 3310 […] more…Mobile World Congress: The Evolution of Mobile Security Through the Years
As I prep for Mobile World Congress, I’ve done some reflecting on my very first cell phone. Whether it was my very first, a Motorola flip phone, then Nokia’s indestructible brick phone, followed by the first-gen iPhone, one thing is certain today: what lives in the palm of my hand has advanced light-years beyond its […] more…The Chronicles of the Hellsing APT: the Empire Strikes Back
Introduction One of the most active APT groups in Asia, and especially around the South China Sea area is “Naikon”. Naikon plays a key part in our story, but the focus of this report is on another threat actor entirely; one who came to our attention when they hit back at a Naikon attack. Naikon […] more…RARSTONE Found In Targeted Attacks
Earlier in February we blogged about RARSTONE, a Remote Access Tool (RAT) that we discovered having some similar characteristics to PlugX, an older and more well-known RAT. In April, the same malware family used the Boston Marathon bombing as part of its social engineering bait. Since then, we’ve been looking out for further attacks using RARSTONE. We’ve […] more…Targeted Attack Campaign Hides Behind SSL Communication
Using encrypted communication like Secure Sockets Layers (SSL) along with the clever use of recent news item as a social engineering lure is the perfect combination to penetrate and remain in a targeted entity’s infrastructure. It didn’t take long for targeted attacks to use last week’s Boston Marathon bombing as a bait to trick predetermined […] more…What Threats Are Unique To My Mobile Device?
Imagine your body being targeted by 75 million viruses. That is exactly what’s happening to your digital devices and mobile devices are being targeted like never before. Mobile smartphone and tablets are being targeted in record numbers. Android has become the most popular platform for new malware, and in McAfee’s Second Quarter Threats Report, was targeted exclusively […] more…Careful With Fake jQuery Website – jquery-framework. com
A few days ago we posted in our Labs notes about a Fake jQuery website that is distributing malware. The domain was properly chosen to confuse the end-users ( jquery-framework.com ), since it looks like a valid site. This is what we were seeing injected on some websites: <script src="httx://jquery-framework.com/jquery-1.7.1.js.. Some people have even complained to […] more…More information
- Unsupported TeamViewer Versions Exploited For Backdoors, Keylogging
- Supply Chain Cyber Risk: Your Digital Shadow is Getting Longer
- Mobile Security Firm Lookout Partners With Samsung, Plans to Attack Corporate Market Later This Year
- Exploitation of Recent Confluence Vulnerability Underway
- Apache Xerces-C CVE-2018-1311 Remote Code Execution Vulnerability
- SSCC 152 – PF Chang’s, TrueCrypt (still!), the Twitter worm and the cost of scammers [PODCAST]
- Samsung, Sectra partner to secure government mobile devices
- Business continuity emerges as latest IPv6 killer app
- Single sign-on moves to the cloud
- What are the desktop virtualization market trends and how can you successfully deploy your solution?