malware - News, Features, and Slideshows

News

• Russian hackers use Twitter to mask sneaky data theft

  A group of suspected Russian hackers are using Twitter in a clever way to mask their data-stealing malware, according to computer security firm FireEye.

• Government security breaches decrease: report

  Australian government networks are being targeted daily by cyber crooks but improved security has seen the number of ‘confirmed significant compromises’ decrease since 2012, a study has found.
  

• Darkode cybercrime forum might be making a comeback

  The former administrator of Darkode, the online cybercrime forum that was recently shut down by law enforcement agencies, is preparing to bring it back, with better security and privacy for its members.

• Former Hacking Team supplier stops selling zero-day exploits on ethical grounds

  Italian surveillance software maker Hacking Team recently claimed that it hasn't lost any customers after the massive leak of its internal data two weeks ago. But it has lost at least one business partner: U.S.-based penetration testing specialist and zero-day exploit broker Netragard.

• Report: Microsoft paying $320m for Cloud security provider Adallom

  Microsoft is said to be paying $320 million to acquire Adallom, a Cloud security provider whose services might help Microsoft in its new push toward becoming a "Cloud-first" company.

• Cyberspies love exploits from Hacking Team leak

  The leaked files from surveillance software maker Hacking Team have proven to be a great resource for cyberespionage groups, which have used at least two Flash Player exploits from the company's arsenal.

• Bogus news app used to deliver Hacking Team spy tool

  Data stolen from Hacking Team continues to yield information about the company's infiltration techniques. The latest find is a fake Android news app, which was used to install its flagship surveillance tool.

• New point-of-sale malware distributed by Andromeda botnet

  Cybercriminals are casting increasingly wider nets in their search for new point-of-sale systems to infect. This appears to be the case with a new memory scraping malware program called GamaPoS that's distributed by a large botnet known as Andromeda.

• Hacking Team's malware uses UEFI rootkit to survive OS reinstalls

  Surveillance software maker Hacking Team has provided its government customers with the ability to infect the low-level firmware found in laptops and other computers that they wanted to spy on.

• Cyberespionage group Pawn Storm uses exploit for unpatched Java flaw

  A sophisticated group of hackers known for targeting military, government and media organizations is currently using an exploit for a vulnerability in Java that hasn't been patched by Oracle.

• Hacking Team's arsenal included at least three unpatched exploits for Flash Player

  Recently breached surveillance software maker, Hacking Team, had access to three different exploits for previously unknown vulnerabilities in Flash Player. All of them are now out in the open, putting Internet users at risk.

• Second Flash Player zero-day exploit found in Hacking Team's data

  The huge cache of files recently leaked from Italian surveillance software maker Hacking Team is the gift that keeps on giving for attackers. Researchers sifting through the data found a new exploit for a previously unknown vulnerability in Adobe's Flash Player.

• Hacker group that hit Twitter, Facebook, Apple and Microsoft intensifies attacks

  The hackers that targeted Twitter, Facebook, Apple and Microsoft developers two years ago have escalated their economic espionage efforts as they seek confidential business information and intellectual property they can profit from.

• Cybercriminals start using Flash zero-day exploit leaked from Hacking Team

  It took just a day for cybercriminals to start using a new and yet-to-be-patched Flash Player exploit that was leaked from a surveillance software developer.

• Android malware masquerades as Nintendo game emulator

  A new family of Android malware adds insult to injury by making users pay for the data-stealing application.