Subterms
Image: Screenshot from Golden Kamuy anime series by Geno Studio. For almost eight years, a hacker has silently hijacked D-Link NVRs (network video recorders) and NAS (network-attached storage) devices into a botnet that had the sole purpose of connecting to online websites and download anime videos. Named Cereals and first spotted in 2012, the botnet […] More
Image: krapalm South Korean smartphone vendor Samsung released this week a security update to fix a critical vulnerability impacting all smartphones sold since 2014. The security flaw resides in how the Android OS flavor running on Samsung devices handles the custom Qmage image format (.qmg), which Samsung smartphones started supporting on all devices released since […] More
In one of the most complex and innovative hacking campaigns detected to date, a hacker group created a fake icons hosting website in order to disguise malicious code meant to steal payment card data from hacked websites. The operation is what security researchers refer to these days as a web skimming, e-skimming, or a Magecart […] More
A new spear-phishing campaign has targeted executives and others in attempt to steal login credentials and bank account details by posing as their smartphone provider. Uncovered by researchers at cybersecurity company Cofense, the attacks come in the form of emails claiming to be from their mobile phone provider, and refer to a problem with their […] More
A new book by Steven Sinofsky, the former head honcho of Office and Windows, details how early Office viruses, WM/Concept.A, Melissa, and ILOVEYOU, combined with Microsoft’s dominance at the time to shape its future and the worldwide PC market. According to Sinofsky, one of the main problems Microsoft faced in the early 2000s was that […] More
Image: Algolia Search service Algolia said it suffered a security breach over the weekend after hackers exploited a well-known vulnerability in the Salt server configuration software to gain access to its infrastructure. The company said the hackers installed a backdoor and a cryptocurrency miner on a small number of its servers, but that the incident […] More
Facebook has moved against accounts spreading QAnon-related conspiracy content in another crackdown on inauthentic behavior. In April’s “Coordinated Inauthentic Behavior” report, Facebook said that a total of five pages, 20 Facebook accounts, and 6 groups were taken down for being associated with the QAnon network, made up of individuals that the social media giant says […] More
For the second time in three months, Toll Group has become the victim of a ransomware attack that has led to the suspension of IT systems. Melbourne, Australia-based Toll Group is a global logistics company that offers freight, warehouse, and distribution services. Toll has roughly 40,000 employees and operates a distribution network across over 50 […] More
