ESET security researchers Dissect the Backdoor Used by NotPetya Operators

What was first considered a ransomware attack turned into a much more complicated situation as researchers at the Slovakian security software firm ESET found a backdoor written into some software updates the Ukrainian M.E.Doc, the main source of infection breakout unleashed last week in Ukraine. According to a post by Security Week, ESET researchers had […]
Share Button
Continue reading →

First Mac malware of 2017 Quimitchin /Fruitfly was discovered targeting biomedical research centers

Security researchers from Malwarebytes have identified strange traffic originating from a Mac. The unusual traffic was identified by IT admins when investigated led to espionage malware describes as Quimitchin. (Apple calls this as ‘Fruitfly’) The malware appears to have been existed for a while and undetected for quite a long time. One of the timestamp […]
Share Button
Continue reading →

Todesco, a security researcher breaks Apple iphone 7 in less than 24 hours

Its hardly been two weeks since release of iphone 7 and a security researcher claims that he has already jailbroken in less than 24 hours. Motherboard,a online news portal mentioned that “one teenage hacker has already had success in jailbreaking the iPhone 7 running iOS 10. In fact, the 19-year-old developer, Luca Todesco, claims to […]
Share Button
Continue reading →

Syrian Electronic Army (SEA) hacks eBay and PayPal UK domains- Twitter shuts down SEA twitter

Syrian Electronic Army targets ebay UK and Paypal – UK today for defacement. SEA provided the confirmation of hack on Twitter, with an example of what appeared to be PayPal.co.uk’s website followed up by a  tweet labeled “Internal Paypal communications confirming penetration” The purported of defacement on PayPal.co.uk read, “Hacked by the Syrian Electronic Army. Long live Syria. F*ck the United […]
Share Button
Continue reading →

SEA Hackers’ Latest Victim – Microsoft’s Official Blog, Email and Twitter Accounts!

Eleven days after hijacking Skype’s social media services, the Syrian Electronic Army (SEA) has targeted Microsoft again by hacking the company’s official blog, employee emails and Twitter accounts. To prove the hack, SEA hackers left a bold message on Microsoft’s Official blog page that read “SEA Syrian Electronic Army Was Here… long live Syria!”. The […]
Share Button
Continue reading →

Apps on Unpatched Android 4.3 can Remove Device Locks from Android Phone – Curesec Research Team – CVE-2013-6271

Recently Google introduced a remote Device locking feature  to  its Android Device Manager to unlock a stolen or lost device. This feature was exploited Researchers from Curesec Research Team from Germany discovered a vulnerability on Android 4.3 that allow a malicious app to remove device locks.leading to CVE 2013-6271. As per the blog, “ The bug […]
Share Button
Continue reading →

Sliding Right attack (Libgcrypt ) Allows Recovery of RSA-1024 Keys

A full key recovery for RSA-1024 and conceivably RSA-2048 might be possible according to an academic paper released last week. The said paper, titled: “Sliding right into disaster: Left-to-right sliding windows leak”, described a flaw  (CVE-2017-7526)  in the cryptographic library Libgcrypt that made it prone to local side-channel attack. According to AO Kaspersky Lab, Libgcrypt, […]
Share Button
Continue reading →

CopyCat malware Infected 14 million Android devices – Checkpoint

Checkpoint researchers identified a mobile malware named Copycat found infected with more than 14 million Android devices worldwide. The infected devices are found to perform ad fraud and has helped hackers make more than $1.5 million in the past 60 days. Once the malware is infected, it tries to root the device allowing the bad […]
Share Button
Continue reading →

OceanLotus, an evolved version of backdoor seen on MacOS by Wildfire

A new variant of the OceanLotus backdoor was detected by researchers in Palo Alto Networks in their recent WildFire cloud analysis platform. Paloalto’s Unit 42 reported that this new variant is developed by the same Vietnamese group who released its precedent in 2015 and is one of the most sophisticated backdoors seen in macOS to […]
Share Button
Continue reading →

New Variant of Android Marcher as Adobe Flash Player Update.

A new variant of the Marcher Android malware is disguising as an update for Adobe Flash Player to steal users’ financial credentials such as online banking and credit card details, according to Zscaler Threatlabz. Previously known to baiting users by exploiting pornographic websites and popular games to deliver payload, the malicious Marcher now resorts to […]
Share Button
Continue reading →